mirror of
https://github.com/elastic/elasticsearch.git
synced 2025-04-24 23:27:25 -04:00
Generating a CA on the fly is an attempt at workflow optimisation that was inherited from certgen. There are potential pitfalls with this approach. Overall it is recommended to separate the step of CA creation and mandate a CA to be specified when generating certificate. This PR add a deprecation message if the cert command is used without specifying a CA. A follow up PR will throw error for this usage in 8.0. For use case where we explicitly trust a certificate without needing a CA, e.g. SAML message signing, the PR adds a --self-signed option to the cert sub-command to generate self-signed certificate. |
||
---|---|---|
.. | ||
certgen.asciidoc | ||
certutil.asciidoc | ||
croneval.asciidoc | ||
index.asciidoc | ||
keystore.asciidoc | ||
node-tool.asciidoc | ||
saml-metadata.asciidoc | ||
setup-passwords.asciidoc | ||
shard-tool.asciidoc | ||
syskeygen.asciidoc | ||
users-command.asciidoc |