|
1 | | - |
2 | 1 | ==== {component} TLS/SSL Settings |
3 | 2 | ifeval::["{component}"=="Auditing"] |
4 | 3 | ifdef::asciidoctor[] |
@@ -52,7 +51,13 @@ Supported cipher suites can be found in Oracle's http://docs.oracle.com/javase/8 |
52 | 51 | Java Cryptography Architecture documentation]. Defaults to the value of |
53 | 52 | `xpack.ssl.cipher_suites`. |
54 | 53 |
|
| 54 | +ifdef::asciidoctor[] |
| 55 | +[#{ssl-context}-tls-ssl-key-trusted-certificate-settings] |
55 | 56 | ===== {component} TLS/SSL Key and Trusted Certificate Settings |
| 57 | +endif::[] |
| 58 | +ifndef::asciidoctor[] |
| 59 | +===== anchor:{ssl-context}-tls-ssl-key-trusted-certificate-settings[] {component} TLS/SSL Key and Trusted Certificate Settings |
| 60 | +endif::[] |
56 | 61 |
|
57 | 62 | The following settings are used to specify a private key, certificate, and the |
58 | 63 | trusted certificates that should be used when communicating over an SSL/TLS connection. |
@@ -118,7 +123,13 @@ Password to the truststore. |
118 | 123 | +{ssl-prefix}.ssl.truststore.secure_password+ (<<secure-settings,Secure>>):: |
119 | 124 | Password to the truststore. |
120 | 125 |
|
| 126 | +ifdef::asciidoctor[] |
| 127 | +[#{ssl-context}-pkcs12-files] |
121 | 128 | ===== PKCS#12 Files |
| 129 | +endif::[] |
| 130 | +ifndef::asciidoctor[] |
| 131 | +===== anchor:{ssl-context}-pkcs12-files[] PKCS#12 Files |
| 132 | +endif::[] |
122 | 133 |
|
123 | 134 | {es} can be configured to use PKCS#12 container files (`.p12` or `.pfx` files) |
124 | 135 | that contain the private key, certificate and certificates that should be trusted. |
@@ -156,7 +167,13 @@ Password to the PKCS#12 file. |
156 | 167 | +{ssl-prefix}.ssl.truststore.secure_password+ (<<secure-settings,Secure>>):: |
157 | 168 | Password to the PKCS#12 file. |
158 | 169 |
|
| 170 | +ifdef::asciidoctor[] |
| 171 | +[#{ssl-context}-pkcs11-tokens] |
159 | 172 | ===== PKCS#11 Tokens |
| 173 | +endif::[] |
| 174 | +ifndef::asciidoctor[] |
| 175 | +===== anchor:{ssl-context}-pkcs11-tokens[] PKCS#11 Tokens |
| 176 | +endif::[] |
160 | 177 |
|
161 | 178 | {es} can be configured to use a PKCS#11 token that contains the private key, |
162 | 179 | certificate and certificates that should be trusted. |
|
0 commit comments