2025-09-14 18:48:49 -06:00
|
|
|
# elasticsearch-certutil
|
|
|
|
|
|
|
|
|
|
> Generate and manage SSL certificates for Elasticsearch security.
|
2026-02-18 06:55:01 -07:00
|
|
|
> More information: <https://www.elastic.co/docs/reference/elasticsearch/command-line-tools/certutil>.
|
2025-09-14 18:48:49 -06:00
|
|
|
|
|
|
|
|
- Generate a new Certificate Authority (CA) with default options:
|
|
|
|
|
|
|
|
|
|
`elasticsearch-certutil ca`
|
|
|
|
|
|
|
|
|
|
- Generate a new certificate using the built-in CA:
|
|
|
|
|
|
|
|
|
|
`elasticsearch-certutil cert`
|
|
|
|
|
|
|
|
|
|
- Generate certificates non-interactively and output PEM files:
|
|
|
|
|
|
|
|
|
|
`elasticsearch-certutil cert {{[-s|--silent]}} --pem`
|
|
|
|
|
|
|
|
|
|
- Generate HTTP certificates with the built-in CA:
|
|
|
|
|
|
|
|
|
|
`elasticsearch-certutil http`
|
|
|
|
|
|
|
|
|
|
- Generate transport certificates non-interactively:
|
|
|
|
|
|
|
|
|
|
`elasticsearch-certutil transport {{[-s|--silent]}}`
|
|
|
|
|
|
|
|
|
|
- Generate a certificate signing request (CSR):
|
|
|
|
|
|
|
|
|
|
`elasticsearch-certutil csr`
|
|
|
|
|
|
|
|
|
|
- Generate encrypted keystore passwords:
|
|
|
|
|
|
|
|
|
|
`elasticsearch-certutil password`
|
|
|
|
|
|
|
|
|
|
- Generate a keystore password with a specified value:
|
|
|
|
|
|
|
|
|
|
`elasticsearch-certutil password --pass {{password}}`
|
