Why is the ssl_key_passphrase missing in the plugins-outputs-elasticsearch?

[hengya_liu]

Logstash 8.10

Elasticsearch output plugin | Logstash Reference [8.10] | Elastic

ssl_key_passphrase is Missing.
If we set the SSL certificate, do we have to use the unencrypted key or use a keystore?

[stephenb (Stephen Brown)]

Hi @hengya_liu Welcome to the community.

Perhaps looking for...

ssl_keystore_password

You can store that in the logstash keystore if you like

Or are you taking about a password for private key for a .pem encoded certificate?

Interesting I do see

key_passphrase for the filebeat connection to elasticsearch...

Perhaps it is missing from the logstash documentation.

Try
ssl_key_passphrase and see if it works...

It is possible it is not supported in Logstash.. you original question

[leandrojmp (Leandro Pereira)]

@hengya_liu

If we set the SSL certificate, do we have to use the unencrypted key or use a keystore?

Yes, Logstash does not support a ssl key with a passphrase.

You need to use one without a passphrase or use a jks/pk12 keystore.

[hengya_liu]

We need to specify the certificate and private key separately (not in keystore form)
So we need to protect the private key.

We tried with ssl_key_passphrase. it does not work.
I also checked with the source code. ssl_key_passphrase is also missing in the source code.

[hengya_liu]

OK, understood. Thanks for your reply.

[stephenb (Stephen Brown)]

@hengya_liu Apologies Yes I just looked at the code it's ruby and is not supported as @leandrojmp said...

[hengya_liu]

OK. We will switch to the format that uses keystore (p12). Thanks a lot.