Giters

sscarduzio / elasticsearch-readonlyrest-plugin

Free Elasticsearch security plugin and Kibana security plugin: super-easy Kibana multi-tenancy, Encryption, Authentication, Authorization, Auditing

Home Page:https://readonlyrest.com

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Support for certificates in PEM format, in addition to keystore format

jpmckinney opened this issue · comments

commented

For comparison, Elasticsearch supports both (e.g. in the instructions on this page: https://www.elastic.co/guide/en/elasticsearch/reference/7.10/configuring-tls.html).

I use Apache's mod_md to automatically get and renew certificates from Let's Encrypt. Like certbot and other tools, it creates certificates in PEM format.

While I can add a hook to convert to PKCS#12 format and then to keystore format (using commands from this blog post, for example), it would be simpler to just point readonlyrest.yml to the certificates in PEM format.

commented

@coutoPL Yes, I already do those steps. It would be nice to just be able to use the original PEM files instead of converting to PKCS12. It's nice that converting to JKS Keystore is (now) optional.