Files
cheatsheet-tldr/tldr/elasticsearch-certutil
2025-12-20 00:20:53 +00:00

42 lines
1.0 KiB
Plaintext

---
syntax: markdown
tags: [tldr, common]
source: https://github.com/tldr-pages/tldr.git
---
# elasticsearch-certutil
> Generate and manage SSL certificates for Elasticsearch security.
> More information: <https://www.elastic.co/docs/reference/elasticsearch/command-line-tools/certutil>.
- Generate a new Certificate Authority (CA) with default options:
`elasticsearch-certutil ca`
- Generate a new certificate using the built-in CA:
`elasticsearch-certutil cert`
- Generate certificates non-interactively and output PEM files:
`elasticsearch-certutil cert {{[-s|--silent]}} --pem`
- Generate HTTP certificates with the built-in CA:
`elasticsearch-certutil http`
- Generate transport certificates non-interactively:
`elasticsearch-certutil transport {{[-s|--silent]}}`
- Generate a certificate signing request (CSR):
`elasticsearch-certutil csr`
- Generate encrypted keystore passwords:
`elasticsearch-certutil password`
- Generate a keystore password with a specified value:
`elasticsearch-certutil password --pass {{password}}`