Spring Data ElasticSearch with SSL

Elastic Stack Elasticsearch
,
1

Hi,

I'm trying to understand how basic SSL works using Spring Data Elasticsearch.
In order to use SSL for Secure HTTPS configuration you need to call usingSsl() method without any parameter during creation of RestHighLevelClient client:
ClientConfiguration.MaybeSecureClientConfigurationBuilder builder = ClientConfiguration.builder().usingSsl()

For common code example please refer to:

My question is how the client knows which trust store it should use for server certificate. Is it a property that should be provided in some configuration file? If yes, what is a name of the property and where it should be defined?

Thank you in advance
Daniel

2

This is more of a question for the spring data team than elasticsearch. That said, the Builder class has a overloaded usingSsl method that takes a SSLContext parameter.

3

Thank you. Yes, indeed, there is an overloaded method, but I would like to know how Elasticsearch server trust store is defined without parameters.

4

The spring data code configures the client, not the server. Assuming your question is about how "client" truststore is configured without parameter. A reasonable guess would be it will use the JDK's default truststore (cacerts).

5

Yes, it seems so. Spring Data should use default Elasticsearch certificate generated by publicly trusted CA installed on client's machine. Thank you very much.

6

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.