|
| 1 | + |
1 | 2 | ==== {component} TLS/SSL Settings |
2 | 3 | You can configure the following TLS/SSL settings. If the settings are not configured, |
3 | 4 | the {ref}/security-settings.html#ssl-tls-settings[Default TLS/SSL Settings] |
@@ -40,13 +41,7 @@ Supported cipher suites can be found in Oracle's http://docs.oracle.com/javase/8 |
40 | 41 | Java Cryptography Architecture documentation]. Defaults to the value of |
41 | 42 | `xpack.ssl.cipher_suites`. |
42 | 43 |
|
43 | | -ifdef::asciidoctor[] |
44 | | -[#{ssl-context}-tls-ssl-key-trusted-certificate-settings] |
45 | 44 | ===== {component} TLS/SSL Key and Trusted Certificate Settings |
46 | | -endif::[] |
47 | | -ifndef::asciidoctor[] |
48 | | -===== anchor:{ssl-context}-tls-ssl-key-trusted-certificate-settings[] {component} TLS/SSL Key and Trusted Certificate Settings |
49 | | -endif::[] |
50 | 45 |
|
51 | 46 | The following settings are used to specify a private key, certificate, and the |
52 | 47 | trusted certificates that should be used when communicating over an SSL/TLS connection. |
@@ -112,13 +107,7 @@ Password to the truststore. |
112 | 107 | +{ssl-prefix}.ssl.truststore.secure_password+ (<<secure-settings,Secure>>):: |
113 | 108 | Password to the truststore. |
114 | 109 |
|
115 | | -ifdef::asciidoctor[] |
116 | | -[#{ssl-context}-pkcs12-files] |
117 | 110 | ===== PKCS#12 Files |
118 | | -endif::[] |
119 | | -ifndef::asciidoctor[] |
120 | | -===== anchor:{ssl-context}-pkcs12-files[] PKCS#12 Files |
121 | | -endif::[] |
122 | 111 |
|
123 | 112 | {es} can be configured to use PKCS#12 container files (`.p12` or `.pfx` files) |
124 | 113 | that contain the private key, certificate and certificates that should be trusted. |
@@ -156,13 +145,7 @@ Password to the PKCS#12 file. |
156 | 145 | +{ssl-prefix}.ssl.truststore.secure_password+ (<<secure-settings,Secure>>):: |
157 | 146 | Password to the PKCS#12 file. |
158 | 147 |
|
159 | | -ifdef::asciidoctor[] |
160 | | -[#{ssl-context}-pkcs11-tokens] |
161 | 148 | ===== PKCS#11 Tokens |
162 | | -endif::[] |
163 | | -ifndef::asciidoctor[] |
164 | | -===== anchor:{ssl-context}-pkcs11-tokens[] PKCS#11 Tokens |
165 | | -endif::[] |
166 | 149 |
|
167 | 150 | {es} can be configured to use a PKCS#11 token that contains the private key, |
168 | 151 | certificate and certificates that should be trusted. |
|
0 commit comments