Hello, can anyone help me how to renew the http certificates of the elasticsearch nodes in a autoconfigured on-prem cluster? The current ones were generated automatically from the enrollment process / at startup of the nodes and are now running out after 2 years. I tried the docu under Update cer…

If you want to use the existing HTTP CA, then I suspect you're going to need to use a separate tool to extract the CA certificate and key from the http.p12. Both openssl and Java's keytool (which ships with Elasticsearch) can do this. With keytool, the simplest option is probably to create a new P…

Renew auto generated http certificates

Elastic Stack Elasticsearch

carly.richmond (Carly Richmond) July 12, 2024, 9:56am 2

Hi @Shaoranlaos,

Thanks for sharing what you've tried. I found these steps for updating the HTTP certs. Have you tried those?

Topic		Replies	Views
Renew auto generated http certificates http.p12 Elastic Search	2	135	May 26, 2025
/etc/elasticsearch/certs/ - 3 files Elasticsearch elastic-stack-security	6	864	July 6, 2023
Renew http_ca.crt CA certificate of the elasticsearch cluster Elasticsearch	1	283	February 14, 2025
Doubts for SSL certs renew on ELK stack v8 Elasticsearch elastic-stack-security	4	673	April 26, 2022
How to replace Security Certificate sign by Elastic CA Elasticsearch elastic-stack-security	5	2825	May 20, 2022

Renew auto generated http certificates

Related topics