Issue with Oependistro SSL configuration using Intermediate and Digi certificates

Security
1

Hi,

I am trying to configure open distro security plugin on a three-node cluster using enterprise signed certificates. I have four certificates root.crt, key, intermediate and digital certificates.

How can I configure SSL with Opendistro when I have intermediate and Digi certificates?

I tried providing certificates in an array. it worked with xpack. but, when we are trying same certificates with open distro. nodes are throwing an exception saying unable to read certificates.

Open Distro isn’t accepting an array.

opendistro_security.ssl.transport.pemcert_filepath: [“nsdev-digi.crt”,“nsdev-intermediate.crt”]
opendistro_security.ssl.transport.pemkey_filepath: nsdev.key
opendistro_security.ssl.transport.pemtrustedcas_filepath: root.crt

–
Thanks
Shiva Vikas

2

opendistro_security.ssl.transport.pemcert_filepath - This should point to a pem file that contains the root, intermediate and actual cert. A simple google should give you the steps on how to concatenate all the three files into a pem.

3

@sreekanth thanks for your reply. it worked after we merge the certificates.

1 Like