ES2.3 SG 2.3
curl -Ss \
–insecure \
-E /vagrant/ch.pem
\
–key
/vagrant/search-guard-ssl/example-pki-scripts/kirk.key.pem \
–tlsv1.2 \
https://localhost:9200/_searchguard/sslinfo?pretty
this Way is OK;
It’s the setting:
searchguard.ssl.transport.enabled: true
searchguard.ssl.transport.keystore_filepath: node-0-keystore.jks
searchguard.ssl.transport.truststore_filepath: truststore.jks
searchguard.ssl.transport.enforce_hostname_verification: false
searchguard.ssl.http.enabled: true
searchguard.ssl.http.keystore_filepath: node-0-keystore.jks
searchguard.ssl.http.truststore_filepath: truststore.jks
searchguard.ssl.http.enable_openssl_if_available: false
searchguard.ssl.transport.enable_openssl_if_available: false
security.manager.enabled: false
searchguard.authcz.admin_dn:
- “CN=kirk, OU=client, O=client, L=Test, C=DE”
discovery.zen.ping.unicast.hosts: 192.168.131.37
discovery.zen.ping.multicast.enabled: false