We would like to use markdown to display images on our Kibana dashboards which are hosted in the cloud (i.e.: "Elastic Cloud").
Those images are confidential. As such, we cannot host them on a server accessible from outside our network. This prevents us from accessing them from our Kibana cloud instance.
As an alternative, I thought of hosting Kibana internally, yet have it connect to our Elastic cloud instance. The server hosting Kibana would be on our internal network. My hopes would be that we could specify a path in markdown pointing a location on our internal NAS.
This led me to learn more about "Remote Clusters" and Cross Cluster Search.
I configured an Elastic stack (v8.5.2, same as our cloud instance) on a machine on our network and followed the various guides to setup TSL on the transport port.
I have created a CA using:
elasticsearch-certutil ca --pem --ca-dn CN=hussein_local_CA
I created a "Trusted Environment" on my cloud instance using that CA certificate.
I then created a certificate using that CA, the output file being "elastic-certificates.p12":
elasticsearch-certutil cert --ca-cert ca.crt --ca-key ca.key
I downloaded the CA certificate from my cloud instance and imported it into the truststore "elastic-certificates.p12" using:
keytool.exe -importcert -trustcacerts -noprompt -keystore elastic-certificates.p12 -storepass X -alias X -file CloudInstanceCAFile.crt
Here is what my elastic.yml on my local instance looks like:
Finally, on my local Elastic instance, I've added my cloud instance as a remote cluster.
Unfortunately, when attempting to establish a connection, the cloud instance returns the following error:
The CA is trusted, yet for some reason the certificate is not verified against the known trusted names.
I synced elastic's code from Git and looked at what could possibly represent those "common-names" that seem to be missing. I found the following in RestrictedTrustManager.java:
Using elasticsearch-certutil cert, I'm not sure exactly how to specify the attributes its looking for.
Any help would be greatly appreciated.