You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
This repository was archived by the owner on Aug 16, 2022. It is now read-only.
## (Optional) Generate node and client certificates
86
86
87
-
Follow the steps in [Generate admin certificates](#generate-admin-certificate) with new file names to generate a new certificate for each node and as many client certificates as you need. Each certificate should use its own private key.
87
+
Follow the steps in [Generate an admin certificate](#generate-an-admin-certificate) with new file names to generate a new certificate for each node and as many client certificates as you need. Each certificate should use its own private key.
88
88
89
-
If you generate node certificates and have `opendistro_security.ssl.transport.enforce_hostname_verification` set to `true` (default), be sure to specify a common name (CN) for the certificate that matches the hostname of the intended node. If you want to use the same node certificate on all nodes (not recommended), set the hostname verification to `false`. For more information, see [Configure TLS certificates](../../security/configuration/tls/#advanced-hostname-verification-and-dns-lookup).
89
+
If you generate node certificates and have `opendistro_security.ssl.transport.enforce_hostname_verification` set to `true` (default), be sure to specify a common name (CN) for the certificate that matches the hostname of the intended node. If you want to use the same node certificate on all nodes (not recommended), set the hostname verification to `false`. For more information, see [Configure TLS certificates](../tls/#advanced-hostname-verification-and-dns-lookup).
90
90
91
91
92
92
### Sample script
@@ -154,7 +154,7 @@ This process generates many files, but these are the ones you need to add to you
154
154
- (Optional) `each-node-cert.pem`
155
155
- (Optional) `each-node-key.pem`
156
156
157
-
For information about adding and configuring these certificates, see [Docker security configuration](../../install/docker-security/) and [Configure TLS certificates](../tls/).
157
+
For information about adding and configuring these certificates, see [Docker security configuration](../../../install/docker-security/) and [Configure TLS certificates](../tls/).
158
158
159
159
160
160
## Run securityadmin.sh
@@ -165,10 +165,10 @@ After configuring your certificates and starting Elasticsearch, run `securityadm
For more information about what this command does, see [Apply configuration changes](../security-admin/) and [Change passwords for read-only users](../../install/docker-security/#change-passwords-for-read-only-users).
168
+
For more information about what this command does, see [Apply configuration changes](../security-admin/).
169
169
{: .tip }
170
170
171
-
If you use Docker, see [Bash access to containers](../../install/docker/#bash-access-to-containers).
171
+
If you use Docker, see [Bash access to containers](../../../install/docker/#bash-access-to-containers).
0 commit comments