# Renew http\_ca.crt

**URL:** <https://discuss.elastic.co/t/renew-http-ca-crt/378814>\
**Category:** Elastic Search\
**Created:** [June 3, 2025, 8:35am UTC](https://discuss.elastic.co/t/renew-http-ca-crt/378814 "2025-06-03T08:35:38Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Frances\_Chu](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/frances_chu/32/127298_2.png) [@Frances\_Chu](https://discuss.elastic.co/u/Frances_Chu)\
**Post date:** [June 3, 2025, 8:35am UTC](https://discuss.elastic.co/t/renew-http-ca-crt/378814/1 "2025-06-03T08:35:38Z")

</div>

I am running elasticsearch version 8.12.0. I renewed http.p12 to year 2036. However, http\_ca.crt will expired soon. Am I need to renew it too? If yes, how to renew the http\_ca.crt. Or I need to create another CA.crt? Thanks!

---

<div class="post-metadata">

**Author:** ![Rios](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rios/32/95745_2.png) [@Rios](https://discuss.elastic.co/u/Rios)\
**Post date:** [June 3, 2025, 9:44am UTC](https://discuss.elastic.co/t/renew-http-ca-crt/378814/2 "2025-06-03T09:44:30Z")

</div>

When CA expires, that means all issued certificates are not valid any more. Steps are the same as you creating CA from 0, create CA, issue certificates etc.

---

<div class="post-metadata">

**Author:** ![Frances\_Chu](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/frances_chu/32/127298_2.png) [@Frances\_Chu](https://discuss.elastic.co/u/Frances_Chu)\
**Post date:** [June 3, 2025, 9:56am UTC](https://discuss.elastic.co/t/renew-http-ca-crt/378814/3 "2025-06-03T09:56:47Z")

</div>

that is I cannot renew the http\_ca.crt. I have to create a new ca myself right?

---

<div class="post-metadata">

**Author:** ![Rios](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rios/32/95745_2.png) [@Rios](https://discuss.elastic.co/u/Rios)\
**Post date:** [June 3, 2025, 11:08am UTC](https://discuss.elastic.co/t/renew-http-ca-crt/378814/4 "2025-06-03T11:08:06Z")

</div>

Check [this article](https://medium.com/@ashishofficial47_85130/how-we-renewed-our-expired-elasticsearch-self-signed-certificate-without-breaking-everything-f269292b2a7c).

---

<div class="post-metadata">

**Author:** ![Frances\_Chu](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/frances_chu/32/127298_2.png) [@Frances\_Chu](https://discuss.elastic.co/u/Frances_Chu)\
**Post date:** [June 4, 2025, 1:45am UTC](https://discuss.elastic.co/t/renew-http-ca-crt/378814/5 "2025-06-04T01:45:02Z")

</div>

Big thx. I already renew the http.p12 by using the original CA, http\_ca.crt. However, i notice the http\_ca.crt will expired soon. So a better solution is to renew the http\_ca.crt and then the http.p12. So I would like to know is there any way to renew the http\_ca.crt. Or I need to generate a new CA myself and followed by new http.p12