Signing/Generating SSL Certificates for ElasticSearch (search-guard)

by iboware   Last Updated March 14, 2019 21:00 PM

I am trying to build my own ElasticSearch cluster and I decided to use an open source plugin called Search Guard. It requires generation of client and host/node certificates. In its demo there is a script which generates a root ca, client and node certificates signed with the generated root ca.

My problem is that I want to use my wildcard ssl certificate for this. How can I create client and node certificates with my wildcard ssl certificate?

This is their demo page explaining how to generate the certificates, but I unfortunately couldn't manage it.



Answers 1


To generate a wildcard cert, follow the same procedure but add a wildcard to the CN -- so instead of CN=foo.example.com, use CN=*.example.com.

Jason Martin
Jason Martin
June 14, 2016 16:03 PM

Related Questions