elasticsearch/docs/reference/commands
Yang Wang bdd99b250f
Deprecate cert gen without a CA and add self-signed option (#64037)
Generating a CA on the fly is an attempt at workflow optimisation that was
inherited from certgen. There are potential pitfalls with this approach. Overall
it is recommended to separate the step of CA creation and mandate a CA to be
specified when generating certificate.

This PR add a deprecation message if the cert command is used without specifying
a CA. A follow up PR will throw error for this usage in 8.0.

For use case where we explicitly trust a certificate without needing a CA, e.g.
SAML message signing, the PR adds a --self-signed option to the cert sub-command
to generate self-signed certificate.
2020-11-30 08:46:02 +11:00
..
certgen.asciidoc [DOCS] Fix elasticsearch-croneval chunking (#63008) 2020-09-29 09:53:20 -04:00
certutil.asciidoc Deprecate cert gen without a CA and add self-signed option (#64037) 2020-11-30 08:46:02 +11:00
croneval.asciidoc [DOCS] Fix elasticsearch-croneval chunking (#63008) 2020-09-29 09:53:20 -04:00
index.asciidoc [DOCS] Adds elasticsearch-keystore command reference (#50872) 2020-01-13 13:02:06 -08:00
keystore.asciidoc Clarify the remove keystore command can handle many (#54244) 2020-03-26 08:49:05 -04:00
node-tool.asciidoc [DOCS] Fix elasticsearch-croneval chunking (#63008) 2020-09-29 09:53:20 -04:00
saml-metadata.asciidoc [DOCS] Fix elasticsearch-croneval chunking (#63008) 2020-09-29 09:53:20 -04:00
setup-passwords.asciidoc [DOCS] Fix elasticsearch-croneval chunking (#63008) 2020-09-29 09:53:20 -04:00
shard-tool.asciidoc [DOCS] Replace twitter dataset in docs (#60604) 2020-08-03 12:49:56 -04:00
syskeygen.asciidoc [DOCS] Fix elasticsearch-croneval chunking (#63008) 2020-09-29 09:53:20 -04:00
users-command.asciidoc [DOCS] Fix elasticsearch-croneval chunking (#63008) 2020-09-29 09:53:20 -04:00