Verify PKI enabling in elastic nodes

[B123 (B S)]

Hi ,
@ikakavas
As i have mentioned earlier, my elasticsearch instance already runs with a Server certificate ,a private key and Root CA certificate used in elasticsearch .yml config
xpack.security.transport.ssl.key:
xpack.security.transport.ssl.certificate:
xpack.security.transport.ssl.certificate_authorities:

xpack.security.http.ssl.key: private.key
xpack.security.http.ssl.certificate:
xpack.security.http.ssl.certificate_authorities:

These certificates have already been created and kept in place. So please let me know how do i use these certificates for PKI (or change the existing certificates if needed)

[ikakavas (Ioannis Kakavas)]

Sharing just the keys of the configuration you use is not very helpful as we cant guess what the value is or how you created these files. As I said above you need your CA key and cert. Do you have them ?

If not, you need to recreate them. Our documentation is very detailed https://www.elastic.co/guide/en/x-pack/6.2/ssl-tls.html there is no point duplicating it here. Please rad through it and let us know if you have any concrete questions.