# Why is the ssl\_key\_passphrase missing in the plugins-outputs-elasticsearch? **URL:** \ **Category:** Logstash\ **Tags:** elastic-stack-security\ **Created:** [October 30, 2023, 2:36am UTC](https://discuss.elastic.co/t/why-is-the-ssl-key-passphrase-missing-in-the-plugins-outputs-elasticsearch/345999 "2023-10-30T02:36:20Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![hengya\_liu](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/hengya_liu/32/125786_2.png) [@hengya\_liu](https://discuss.elastic.co/u/hengya_liu)\ **Post date:** [October 30, 2023, 2:36am UTC](https://discuss.elastic.co/t/why-is-the-ssl-key-passphrase-missing-in-the-plugins-outputs-elasticsearch/345999/1 "2023-10-30T02:36:20Z")
Logstash 8.10 > **[Elasticsearch output plugin | Logstash Reference \[8.10\] | Elastic](https://www.elastic.co/guide/en/logstash/current/plugins-outputs-elasticsearch.html)** ssl\_key\_passphrase is Missing. If we set the SSL certificate, do we have to use the unencrypted key or use a keystore? ---
**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\ **Post date:** [October 30, 2023, 2:51am UTC](https://discuss.elastic.co/t/why-is-the-ssl-key-passphrase-missing-in-the-plugins-outputs-elasticsearch/345999/2 "2023-10-30T02:51:09Z")
Hi @hengya_liu Welcome to the community. Perhaps looking for... [`ssl_keystore_password`](https://www.elastic.co/guide/en/logstash/current/plugins-outputs-elasticsearch.html#plugins-outputs-elasticsearch-ssl_keystore_password) You can store that in the logstash keystore if you like Or are you taking about a password for private key for a .pem encoded certificate? Interesting I do see `key_passphrase` for the filebeat connection to elasticsearch... Perhaps it is missing from the logstash documentation. Try `ssl_key_passphrase` and see if it works... It is possible it is not supported in Logstash.. you original question 🙂 ---
**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\ **Post date:** [October 30, 2023, 3:13am UTC](https://discuss.elastic.co/t/why-is-the-ssl-key-passphrase-missing-in-the-plugins-outputs-elasticsearch/345999/3 "2023-10-30T03:13:08Z")
> [@hengya\_liu](#): > > If we set the SSL certificate, do we have to use the unencrypted key or use a keystore? Yes, Logstash does not support a ssl key with a passphrase. You need to use one without a passphrase or use a jks/pk12 keystore. ---
**Author:** ![hengya\_liu](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/hengya_liu/32/125786_2.png) [@hengya\_liu](https://discuss.elastic.co/u/hengya_liu)\ **Post date:** [October 30, 2023, 3:13am UTC](https://discuss.elastic.co/t/why-is-the-ssl-key-passphrase-missing-in-the-plugins-outputs-elasticsearch/345999/4 "2023-10-30T03:13:35Z")
We need to specify the certificate and private key separately (not in keystore form) So we need to protect the private key. We tried with ssl\_key\_passphrase. it does not work. I also checked with the source code. ssl\_key\_passphrase is also missing in the source code. ---
**Author:** ![hengya\_liu](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/hengya_liu/32/125786_2.png) [@hengya\_liu](https://discuss.elastic.co/u/hengya_liu)\ **Post date:** [October 30, 2023, 3:14am UTC](https://discuss.elastic.co/t/why-is-the-ssl-key-passphrase-missing-in-the-plugins-outputs-elasticsearch/345999/5 "2023-10-30T03:14:35Z")
OK, understood. Thanks for your reply. ---
**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\ **Post date:** [October 30, 2023, 3:18am UTC](https://discuss.elastic.co/t/why-is-the-ssl-key-passphrase-missing-in-the-plugins-outputs-elasticsearch/345999/6 "2023-10-30T03:18:21Z")
@hengya_liu Apologies Yes I just looked at the code it's ruby and is not supported as @leandrojmp said... ---
**Author:** ![hengya\_liu](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/hengya_liu/32/125786_2.png) [@hengya\_liu](https://discuss.elastic.co/u/hengya_liu)\ **Post date:** [October 30, 2023, 6:27am UTC](https://discuss.elastic.co/t/why-is-the-ssl-key-passphrase-missing-in-the-plugins-outputs-elasticsearch/345999/7 "2023-10-30T06:27:43Z")
OK. We will switch to the format that uses keystore (p12). Thanks a lot. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [November 27, 2023, 6:28am UTC](https://discuss.elastic.co/t/why-is-the-ssl-key-passphrase-missing-in-the-plugins-outputs-elasticsearch/345999/8 "2023-11-27T06:28:21Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.