Hello, I have been banging my head against the wall for days now about this. I am using docker-compose to run opensearch. I am trying to replace the demo certificates with certificates generated by the CA on our Domain Controller, I am not generating certificates with openssl or any other command …

@michael.anderton Is this the same issue as this one? [image] SSL Certificate Error "unknown_certificate" Security @michael.anderton Your docker-compose.yml certificates mappings are as follows volumes: - opensearch-data2:/usr/share/opensearch/data …

Hello, What documentation was used for you certificates configurations? Active Directory and LDAP - OpenSearch documentation

@michael.anderton Could you run the below command against one of your test certificates and share the key usage and the extended key usage? openssl -x509 -in <test_node_cert> -text -noout

@pablo It would seem as though the CA is not adding client auth to my key usage as I am wanting it to. X509v3 extensions: 1.3.6.1.4.1.311.21.7: 0..&+.....7.....:...c.......a.....?...|..`..d... X509v3 Key Usage: critical Digital Signature, Key …

@michael.anderton Could you also share your docker-compose.yml file and opensearch.yml?

@pablo It is based off of the same issue as the other, yes. This one can be closed.

Windows CA Certificates

Security

pablo August 12, 2022, 10:03am 6

@michael.anderton Is this the same issue as this one?

Topic		Replies	Views
Certificate configuration Error Security troubleshoot , configure	5	3027	June 26, 2023
SSL Certificates not working Security	11	86	March 20, 2026
Deprecating Client Authentication Extended Key Usage in certificates OpenSearch security-issue	2	179	August 19, 2025
CA Signed Certificates Security troubleshoot	10	1560	June 8, 2022
Client cert auth Security troubleshoot	6	1098	May 26, 2023

Windows CA Certificates

Related topics