# Transport SSL Keystore Key Passwort

**URL:** <https://forum.search-guard.com/t/transport-ssl-keystore-key-passwort/1277>\
**Category:** Search Guard\
**Created:** [January 10, 2019, 9:48am UTC](https://forum.search-guard.com/t/transport-ssl-keystore-key-passwort/1277 "2019-01-10T09:48:21Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![clemens.loebig](https://avatars.discourse-cdn.com/v4/letter/c/74df32/32.png) [@clemens.loebig](https://forum.search-guard.com/u/clemens.loebig)\
**Post date:** [January 10, 2019, 9:48am UTC](https://forum.search-guard.com/t/transport-ssl-keystore-key-passwort/1277/1 "2019-01-10T09:48:21Z")

</div>

Ubuntu 18.04.1  
elasticsearch 6.5.3  
search-guard 6.5.4-24.0

Hi, has anyone Idea to Set Transport Keystore Key Password?  
I can only set Keystore Passwort but not the Key Password

---

<div class="post-metadata">

**Author:** ![searchguard\_google\_group](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/searchguard_google_group/32/462_2.png) [@searchguard\_google\_group](https://forum.search-guard.com/u/searchguard_google_group)\
**Post date:** [January 10, 2019, 2:02pm UTC](https://forum.search-guard.com/t/transport-ssl-keystore-key-passwort/1277/2 "2019-01-10T14:02:11Z")

</div>

Currently, for JKS and PKCS12 its assumed that the key password (if there is one) is the same as the keystore password.  
I will raise an internal issue for that but the recommended way is anyhow to use pem directly instead of JKS or PKCS12.

> **···**
>
> > Am 10.01.2019 um 10:48 schrieb clemens.loebig@exellio.de:
> > 
> > Ubuntu 18.04.1  
> > elasticsearch 6.5.3  
> > search-guard 6.5.4-24.0
> > 
> > Hi, has anyone Idea to Set Transport Keystore Key Password?  
> > I can only set Keystore Passwort but not the Key Password
> > 
> > --  
> > You received this message because you are subscribed to the Google Groups "Search Guard Community Forum" group.  
> > To unsubscribe from this group and stop receiving emails from it, send an email to search-guard+unsubscribe@googlegroups.com.  
> > To post to this group, send email to search-guard@googlegroups.com.  
> > To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/cc768ca2-d6cd-4bfb-bdd5-4f8a5d446d14%40googlegroups.com\](https://groups.google.com/d/msgid/search-guard/cc768ca2-d6cd-4bfb-bdd5-4f8a5d446d14%40googlegroups.com%5C).  
> > For more options, visit [https://groups.google.com/d/optout\](https://groups.google.com/d/optout%5C).

---

<div class="post-metadata">

**Author:** ![searchguard\_google\_group](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/searchguard_google_group/32/462_2.png) [@searchguard\_google\_group](https://forum.search-guard.com/u/searchguard_google_group)\
**Post date:** [March 20, 2019, 6:04pm UTC](https://forum.search-guard.com/t/transport-ssl-keystore-key-passwort/1277/3 "2019-03-20T18:04:29Z")

</div>

Implemented with v24.2

> **···**
>
> On Thursday, 10 January 2019 15:02:14 UTC+1, Search Guard wrote:
> 
> > Currently, for JKS and PKCS12 its assumed that the key password (if there is one) is the same as the keystore password.
> > 
> > I will raise an internal issue for that but the recommended way is anyhow to use pem directly instead of JKS or PKCS12.
> > 
> > > Am 10.01.2019 um 10:48 schrieb cle…ig@e…o.de:
> > 
> > > Ubuntu 18.04.1
> > 
> > > elasticsearch 6.5.3
> > 
> > > search-guard 6.5.4-24.0
> > 
> > > Hi, has anyone Idea to Set Transport Keystore Key Password?
> > 
> > > I can only set Keystore Passwort but not the Key Password