# SSL in Elasticsearch - is it free?

**URL:** <https://discuss.elastic.co/t/ssl-in-elasticsearch-is-it-free/209438>\
**Category:** Elasticsearch\
**Created:** [November 26, 2019, 7:54am UTC](https://discuss.elastic.co/t/ssl-in-elasticsearch-is-it-free/209438 "2019-11-26T07:54:29Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![mgomse](https://avatars.discourse-cdn.com/v4/letter/m/c5a1d2/32.png) [@mgomse](https://discuss.elastic.co/u/mgomse)\
**Post date:** [November 26, 2019, 7:54am UTC](https://discuss.elastic.co/t/ssl-in-elasticsearch-is-it-free/209438/1 "2019-11-26T07:54:29Z")

</div>

Good morning,

This is my first post here so I hope that I'll do everything correctly 🙂 So here is my story:

- I'm using [https://github.com/elastic/helm-charts/tree/master/elasticsearch](https://github.com/elastic/helm-charts/tree/master/elasticsearch) in my k8s cluster
- I want to set SSL connection in my cluster (according to [https://github.com/elastic/helm-charts/tree/master/elasticsearch#security](https://github.com/elastic/helm-charts/tree/master/elasticsearch#security))
- Moreover I made it already! However, I'm not fully sure won't I lose it in 30 days ... **That's why I created this topic - to ask won't I lost SSL communication in 30 days?**

I saw [in the subscriptions page](https://www.elastic.co/subscriptions) that "Encrypted communications" is in the Basic plan, so I assumed that I can use it.  
Moreover I found [here](https://www.elastic.co/guide/en/elasticsearch/reference/current/docker.html) that:

> These images are free to use under the Elastic license. They contain open source and free commercial features and access to paid commercial features.

However in [Elasticsearch Security: Configure TLS/SSL & PKI Authentication | Elastic Blog](https://www.elastic.co/blog/elasticsearch-security-configure-tls-ssl-pki-authentication) I found that

> In order to enable security it is necessary to have either a [Gold or Platinum subscription](https://www.elastic.co/subscriptions), or a trial license enabled via [Kibana](https://www.elastic.co/guide/en/elastic-stack-overview/6.5/get-started-license.html) or [API](https://www.elastic.co/guide/en/elasticsearch/reference/6.5/start-trial.html).

Also in [here](https://www.elastic.co/guide/en/elasticsearch/reference/current/configuring-tls-docker.html) I've found that:

> Automatically generate and apply a trial subscription, in order to enable security features.

So I started to worry that after I'll go live and after 30 days my website will stop working...

**Could you tell me is SSL connection (below options) available for free in the `docker.elastic.co/elasticsearch/elasticsearch:7.2.0` image and I won't loose it after 30 days?**

```auto
xpack.security.enabled: true
xpack.security.transport.ssl.enabled: true
xpack.security.transport.ssl.verification_mode: certificate
xpack.security.http.ssl.key: /usr/share/elasticsearch/config/certs/cert.key
xpack.security.http.ssl.certificate_authorities: /usr/share/elasticsearch/config/certs/ca.crt
xpack.security.http.ssl.certificate: /usr/share/elasticsearch/config/certs/cert.crt
xpack.security.http.ssl.enabled: true
xpack.security.transport.ssl.certificate_authorities: /usr/share/elasticsearch/config/certs/ca.crt
xpack.security.transport.ssl.certificate: /usr/share/elasticsearch/config/certs/cert.crt
xpack.security.transport.ssl.key: /usr/share/elasticsearch/config/certs/cert.key

```

Thank you in advance for your help!

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [November 26, 2019, 8:08am UTC](https://discuss.elastic.co/t/ssl-in-elasticsearch-is-it-free/209438/2 "2019-11-26T08:08:47Z")

</div>

Yes this feature is included in the free basic plan now.

---

<div class="post-metadata">

**Author:** ![mgomse](https://avatars.discourse-cdn.com/v4/letter/m/c5a1d2/32.png) [@mgomse](https://discuss.elastic.co/u/mgomse)\
**Post date:** [November 26, 2019, 8:20am UTC](https://discuss.elastic.co/t/ssl-in-elasticsearch-is-it-free/209438/3 "2019-11-26T08:20:37Z")

</div>

Great, thank you very much for your quick answer @dadoonet 😃

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 24, 2019, 8:20am UTC](https://discuss.elastic.co/t/ssl-in-elasticsearch-is-it-free/209438/4 "2019-12-24T08:20:39Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.