Can I have admin certificate signed by different authority and node certificate signed by different authority

Security
1

Versions (relevant - OpenSearch/Dashboard/Server OS/Browser):
2.3.0

Describe the issue:
Can I use admin certificate signed by different certificate authority and node certificate signed by different certificate authority?
If yes, can I also use different certificates for different machines(different nodes) in the cluster?

Configuration:

Relevant Logs or Screenshots:

2

Hi @ankitlunawat7,

Yes, rootCA must either match the rootCA of the HTTP layer or must be concatenated with the HTTP layer rootCA.

Best,
mj

3

@Mantas Thank you for your reply
Is it possible to use different certificates for different machines(nodes) in the cluster as well then?

4

@ankitlunawat7, yes it is possible. A few things to keep in mind: all rootCA must be concatenated in all nodes and all nodes require a restart to apply new rootCA.

Best,
mj

5

@Mantas Noted. Thank you so much