Verify PKI enabling in elastic nodes

Elastic Stack Elasticsearch
21

Hi ,
@ikakavas
As i have mentioned earlier, my elasticsearch instance already runs with a Server certificate ,a private key and Root CA certificate used in elasticsearch .yml config
xpack.security.transport.ssl.key:
xpack.security.transport.ssl.certificate:
xpack.security.transport.ssl.certificate_authorities:

xpack.security.http.ssl.key: private.key
xpack.security.http.ssl.certificate:
xpack.security.http.ssl.certificate_authorities:

These certificates have already been created and kept in place. So please let me know how do i use these certificates for PKI (or change the existing certificates if needed)

22

Sharing just the keys of the configuration you use is not very helpful as we cant guess what the value is or how you created these files. As I said above you need your CA key and cert. Do you have them ?

If not, you need to recreate them. Our documentation is very detailed https://www.elastic.co/guide/en/x-pack/6.2/ssl-tls.html there is no point duplicating it here. Please rad through it and let us know if you have any concrete questions.