# Kibana SSL connection to elasticsearch

**URL:** <https://forum.opensearch.org/t/kibana-ssl-connection-to-elasticsearch/2933>\
**Category:** Security\
**Created:** [May 30, 2020, 10:42am UTC](https://forum.opensearch.org/t/kibana-ssl-connection-to-elasticsearch/2933 "2020-05-30T10:42:30Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![rezar00](https://avatars.discourse-cdn.com/v4/letter/r/90ced4/32.png) [@rezar00](https://forum.opensearch.org/u/rezar00)\
**Post date:** [May 30, 2020, 10:42am UTC](https://forum.opensearch.org/t/kibana-ssl-connection-to-elasticsearch/2933/1 "2020-05-30T10:42:30Z")

</div>

Hey there,  
I have a trouble with configuring kibana to connect based on tls config with elastic search

ive made elastic.keystore and elastic.truststore ( with client cert) and config elastic with these files. and after that create client.keystore and client.truststore( with elastic cert).

i wanna connect kibana to elastic with these files and config ssl ,

how can i do this?

this is my kibana config:

# Description:

# Default Kibana configuration from kibana-docker.

server.name: kibana  
server.host: “0”  
elasticsearch.hosts: [https://localhost:9200](https://localhost:9200)  
elasticsearch.ssl.verificationMode: certificate  
elasticsearch.ssl.certificate: “/usr/share/kibana/config/elastic.truststore”  
elasticsearch.ssl.key: “/usr/share/kibana/config/client.keystore”

# elasticsearch.ssl.keystore.path: “/usr/share/kibana/config/elastic.keystore”

# elasticsearch.ssl.keystore.password: “123456”

# elasticsearch.ssl.truststore.path: “/usr/share/kibana/config/client.keystore”

# elasticsearch.ssl.truststore.password: “123456”

elasticsearch.username: admin  
elasticsearch.password: admin  
elasticsearch.requestHeadersWhitelist: [“securitytenant”,“Authorization”]

opendistro\_security.multitenancy.enabled: true  
opendistro\_security.multitenancy.tenants.preferred: [“Private”, “Global”]  
opendistro\_security.readonly\_mode.roles: [“kibana\_read\_only”]

newsfeed.enabled: false  
telemetry.optIn: false  
telemetry.enabled: false

and this is my elastic config:

cluster.name: “docker-cluster”  
network.host: 0.0.0.0

#opendistro\_security.disabled: true

######## Start OpenDistro for Elasticsearch Security Configuration ########  
opendistro\_security.ssl.transport.keystore\_filepath: elastic.keystore  
opendistro\_security.ssl.transport.keystore\_type: PKCS12  
opendistro\_security.ssl.transport.keystore\_alias: elasticserver  
opendistro\_security.ssl.transport.keystore\_password: 123456

opendistro\_security.ssl.transport.truststore\_filepath: elastic.truststore  
opendistro\_security.ssl.transport.truststore\_type: PKCS12  
opendistro\_security.ssl.transport.truststore\_alias: elasticclient  
opendistro\_security.ssl.transport.truststore\_password: 123456

opendistro\_security.ssl.transport.enforce\_hostname\_verification: false  
opendistro\_security.ssl.http.enabled: true

opendistro\_security.ssl.http.keystore\_filepath: elastic.keystore  
opendistro\_security.ssl.http.keystore\_type: PKCS12  
opendistro\_security.ssl.http.keystore\_alias: elasticserver  
opendistro\_security.ssl.http.keystore\_password: “123456”

opendistro\_security.ssl.http.truststore\_filepath: elastic.truststore  
opendistro\_security.ssl.http.truststore\_type: PKCS12  
opendistro\_security.ssl.http.truststore\_alias: elasticclient  
opendistro\_security.ssl.http.truststore\_password: 123456  
opendistro\_security.ssl.http.clientauth\_mode: REQUIRE  
opendistro\_security.ssl.http.enable\_openssl\_if\_available: false

opendistro\_security.allow\_unsafe\_democertificates: false

opendistro\_security.allow\_default\_init\_securityindex: true

opendistro\_security.authcz.admin\_dn:

- ‘CN=Elastic Server,O=ISC, C=IR’
- ‘CN=Elastic Client,O=ISC,C=IR’  
opendistro\_security.nodes\_dn:
- ‘CN=Elastic Server,O=ISC,C=IR’  
opendistro\_security.audit.type: internal\_elasticsearch  
opendistro\_security.enable\_snapshot\_restore\_privilege: true  
opendistro\_security.check\_snapshot\_restore\_write\_privileges: true  
opendistro\_security.restapi.roles\_enabled: [“all\_access”, “security\_rest\_api\_access”]  
cluster.routing.allocation.disk.threshold\_enabled: false  
discovery.zen.minimum\_master\_nodes: 1  
node.max\_local\_storage\_nodes: 3  
######## End OpenDistro for Elasticsearch Security Demo Configuration ########

---

<div class="post-metadata">

**Author:** ![Anthony](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/anthony/32/9939_2.png) [@Anthony](https://forum.opensearch.org/u/Anthony)\
**Post date:** [April 16, 2021, 1:37pm UTC](https://forum.opensearch.org/t/kibana-ssl-connection-to-elasticsearch/2933/2 "2021-04-16T13:37:31Z")

</div>

Hi @rezar00 did you manage to get this resolved? If not can you confirm if the above config is all one file or separate kibana.yml and elasticsearch.yml files?