SG SSL without SG on ES v5.x

Search Guard
1

Hi

I wanted to know is it possible to SG SSL with ES 5.5.x, but not use SG itself?

Also if I want to only enable SSL only on transport port, but not on the http port, is that something that can be done?

In other words, I am trying to see if I can only secure the node to node communication.

Thanks!

2

yes, all that is possible

···

Am 08.09.2017 um 03:39 schrieb askids <ashokds@gmail.com>:

Hi

I wanted to know is it possible to SG SSL with ES 5.5.x, but not use SG itself?

Also if I want to only enable SSL only on transport port, but not on the http port, is that something that can be done?

In other words, I am trying to see if I can only secure the node to node communication.

Thanks!

--
You received this message because you are subscribed to the Google Groups "Search Guard Community Forum" group.
To unsubscribe from this group and stop receiving emails from it, send an email to search-guard+unsubscribe@googlegroups.com.
To post to this group, send email to search-guard@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/search-guard/9c6d8df1-138c-4fb6-a815-7758b79e7649%40googlegroups.com\.
For more options, visit https://groups.google.com/d/optout\.

3

Great. Can you please point me to documentation on how to set it up? I am unable to find it.

4

You need to install the SSL plugin, this is available as a standalone version and can be installed like any other ES plugin, including Search Guard. Example:

bin/elasticsearch-plugin install com.floragunn:search-guard-ssl:5.4.0-22

All available versions of Search Guard SSL:

Docs can be found here:

TLS in particular:

···

On Friday, September 8, 2017 at 6:22:19 PM UTC+2, askids wrote:

Great. Can you please point me to documentation on how to set it up? I am unable to find it.