# SG SSL without SG on ES v5.x

**URL:** <https://forum.search-guard.com/t/sg-ssl-without-sg-on-es-v5-x/594>\
**Category:** Search Guard\
**Created:** [September 8, 2017, 1:39am UTC](https://forum.search-guard.com/t/sg-ssl-without-sg-on-es-v5-x/594 "2017-09-08T01:39:06Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![askids](https://avatars.discourse-cdn.com/v4/letter/a/49beb7/32.png) [@askids](https://forum.search-guard.com/u/askids)\
**Post date:** [September 8, 2017, 1:39am UTC](https://forum.search-guard.com/t/sg-ssl-without-sg-on-es-v5-x/594/1 "2017-09-08T01:39:06Z")

</div>

Hi

I wanted to know is it possible to SG SSL with ES 5.5.x, but not use SG itself?

Also if I want to only enable SSL only on transport port, but not on the http port, is that something that can be done?

In other words, I am trying to see if I can only secure the node to node communication.

Thanks!

---

<div class="post-metadata">

**Author:** ![searchguard\_google\_group](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/searchguard_google_group/32/462_2.png) [@searchguard\_google\_group](https://forum.search-guard.com/u/searchguard_google_group)\
**Post date:** [September 8, 2017, 8:58am UTC](https://forum.search-guard.com/t/sg-ssl-without-sg-on-es-v5-x/594/2 "2017-09-08T08:58:05Z")

</div>

yes, all that is possible

> **···**
>
> > Am 08.09.2017 um 03:39 schrieb askids \<ashokds@gmail.com\>:
> > 
> > Hi
> > 
> > I wanted to know is it possible to SG SSL with ES 5.5.x, but not use SG itself?
> > 
> > Also if I want to only enable SSL only on transport port, but not on the http port, is that something that can be done?
> > 
> > In other words, I am trying to see if I can only secure the node to node communication.
> > 
> > Thanks!
> > 
> > --  
> > You received this message because you are subscribed to the Google Groups "Search Guard Community Forum" group.  
> > To unsubscribe from this group and stop receiving emails from it, send an email to search-guard+unsubscribe@googlegroups.com.  
> > To post to this group, send email to search-guard@googlegroups.com.  
> > To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/9c6d8df1-138c-4fb6-a815-7758b79e7649%40googlegroups.com\](https://groups.google.com/d/msgid/search-guard/9c6d8df1-138c-4fb6-a815-7758b79e7649%40googlegroups.com%5C).  
> > For more options, visit [https://groups.google.com/d/optout\](https://groups.google.com/d/optout%5C).

---

<div class="post-metadata">

**Author:** ![askids](https://avatars.discourse-cdn.com/v4/letter/a/49beb7/32.png) [@askids](https://forum.search-guard.com/u/askids)\
**Post date:** [September 8, 2017, 4:22pm UTC](https://forum.search-guard.com/t/sg-ssl-without-sg-on-es-v5-x/594/3 "2017-09-08T16:22:18Z")

</div>

Great. Can you please point me to documentation on how to set it up? I am unable to find it.

---

<div class="post-metadata">

**Author:** ![jkressin](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/jkressin/32/9_2.png) [@jkressin](https://forum.search-guard.com/u/jkressin)\
**Post date:** [September 8, 2017, 5:27pm UTC](https://forum.search-guard.com/t/sg-ssl-without-sg-on-es-v5-x/594/4 "2017-09-08T17:27:25Z")

</div>

You need to install the SSL plugin, this is available as a standalone version and can be installed like any other ES plugin, including Search Guard. Example:

bin/elasticsearch-plugin install com.floragunn:search-guard-ssl:5.4.0-22

All available versions of Search Guard SSL:

> **[GitHub - floragunncom/search-guard-ssl: Search Guard SSL Plugin](https://github.com/floragunncom/search-guard-ssl)**
>
> Search Guard SSL Plugin. Contribute to floragunncom/search-guard-ssl development by creating an account on GitHub.

Docs can be found here:

> **[search-guard-docs](http://floragunncom.github.io/search-guard-docs/)**
>
> Official documentation for Search Guard, the Elasticsearch security suite

TLS in particular:

> **[Configuring TLS](http://floragunncom.github.io/search-guard-docs/tls_configuration.html)**
>
> Search Guard TLS configuration settings for the REST and the transport layer. Extended security options for hostname verification and DNS lookups.

> **···**
>
> On Friday, September 8, 2017 at 6:22:19 PM UTC+2, askids wrote:
> 
> > Great. Can you please point me to documentation on how to set it up? I am unable to find it.
