Exception when reloading self signed certs via REST API

pablo · June 21, 2024, 9:36am

@reneradoi Try adding plugins.security.cert.oid: '1.2.3.4.5.5' into opensearch.yml file in every OS node.

opensearch-project/security/blob/435856c919e4e92cf030fbdadc11bf87dd991543/config/opensearch.yml.example#L188


      
          
          ############## Expert settings ##############
          # WARNING: Expert settings, do only use if you know what you are doing
          # If you set wrong values here this this could be a security risk
          # or make OpenSearch Security stop working
          
          # Name of the index where .opendistro_security stores its configuration.
          
          #plugins.security.config_index_name: .opendistro_security
          
          # This defines the OID of server node certificates
          #plugins.security.cert.oid: '1.2.3.4.5.5'
          
          # This specifies the implementation of org.opensearch.security.transport.InterClusterRequestEvaluator
          # that is used to determine inter-cluster request.
          # Instances of org.opensearch.security.transport.InterClusterRequestEvaluator must implement a single argument
          # constructor that takes an org.opensearch.common.settings.Settings
          #plugins.security.cert.intercluster_request_evaluator_class: org.opensearch.security.transport.DefaultInterClusterRequestEvaluator
          
          # By default, normal users can restore snapshots if they have the priviliges 'cluster:admin/snapshot/restore', 
          # 'indices:admin/create', and 'indices:data/write/index' for the indices to be restored.

Topic		Replies	Views
Can't reload SSL certs via API Security	5	897	August 1, 2023
New certificates should not expire before the current ones Security troubleshoot	9	333	November 19, 2024
Failed to initialize the server-side SSL context / Certificate chain is not valid Security	1	561	February 23, 2024
SSLconfigException Error OpenSearch troubleshoot	26	997	January 11, 2024
Fails on SSL when using REST API on Getting Started local docker compose cluster General Feedback troubleshoot	2	3104	January 19, 2022

Exception when reloading self signed certs via REST API

Related topics