github-mirrors/elasticsearch
1
0
Fork 0
mirror of https://github.com/elastic/elasticsearch.git synced 2025-06-28 17:34:17 -04:00
Code Issues Projects Releases Packages Wiki Activity
elasticsearch/docs/reference
History
Slobodan Adamović 65d152640b
Set keyUsage for generated HTTP certificates and self-signed CA (#126376) (#126448) 
* Set `keyUsage` for generated HTTP certificates and self-signed CA (#126376)

The `elasticsearch-certutil http` command, and security auto-configuration,
generate the HTTP certificate and CA without setting the `keyUsage` extension.

This PR fixes this by setting (by default):
- `keyCertSign` and `cRLSign` for self-signed CAs
- `digitalSignature` and `keyEncipherment` for HTTP certificates and CSRs

These defaults can be overridden when running `elasticsearch-certutil http`
command. The user will be prompted to change them as they wish.

For `elasticsearch-certutil ca`, the default value can be overridden by passing
the `--keysage` option, e.g.
```
elasticsearch-certutil ca --keyusage "digitalSignature,keyCertSign,cRLSign" -pem
```

Fixes #117769

(cherry picked from commit 284121ad9f)

# Conflicts:
#	docs/reference/elasticsearch/command-line-tools/certutil.md

* fix compilation error

* [CI] Auto commit changes from spotless

* fix failing test

---------

Co-authored-by: elasticsearchmachine <infra-root+elasticsearchmachine@elastic.co>
2025-04-08 20:47:15 +10:00
..
aggregations (Doc+) Clarify dimension field requirements for time_series aggregation (#119442) (#121163) 2025-01-29 18:09:18 +01:00
analysis Update Flatten Graph Docs to Include a Real Flattened Graph 8.x (#123900) (#123922) 2025-03-04 08:02:05 +11:00
autoscaling [DOCS] Link to new API site (#119038) (#119360) 2024-12-31 04:18:27 +11:00
behavioral-analytics/apis [DOCS] Link to new API site (#119038) (#119360) 2024-12-31 04:18:27 +11:00
cat Update recovery.asciidoc (#114889) (#121217) 2025-01-30 04:44:33 +11:00
ccr [DOCS] More links to new API site (#119377) (#119418) 2024-12-31 20:21:46 +00:00
cluster Clarify the behavior of remote/info and resolve/cluster for connected status of remotes (#118993) (#121203) 2025-01-29 14:51:50 -05:00
commands Set keyUsage for generated HTTP certificates and self-signed CA (#126376) (#126448) 2025-04-08 20:47:15 +10:00
connector [DOCS] Update connectors repo link (#124072) 2025-03-05 10:10:43 +01:00
data-management [8.17] [DOCS] Concept cleanup 2 - ES settings (#119373) (#119643) 2025-01-10 10:31:05 -05:00
data-streams Backport docs-content#962 (#126242) (#126248) 2025-04-04 07:46:00 +11:00
docs [DOCS] Upsert documentation clarification (#120684) (#121134) 2025-01-29 20:13:27 +11:00
eql [DOCS] More links to new API site (#119377) (#119418) 2024-12-31 20:21:46 +00:00
esql [8.x] ESQL: supplement docs on LIMIT (#125967) (#126396) 2025-04-07 22:11:08 +10:00
features/apis [8.17] Minor docs fixes (#126144) (#126153) 2025-04-02 13:02:08 -04:00
fleet [DOCS] More links to new API site (#119377) (#119418) 2024-12-31 20:21:46 +00:00
graph [DOCS] More links to new API site (#119377) (#119418) 2024-12-31 20:21:46 +00:00
health [DOCS] More links to new API site (#119377) (#119418) 2024-12-31 20:21:46 +00:00
high-availability [8.17] [DOCS] Concept cleanup 2 - ES settings (#119373) (#119643) 2025-01-10 10:31:05 -05:00
how-to [DOCS] Rename how-to subsection, move recipes to search relevance (#117044) (#117046) 2024-11-20 04:53:03 +11:00
ilm [8.17] [DOCS] Concept cleanup 2 - ES settings (#119373) (#119643) 2025-01-10 10:31:05 -05:00
images Update Flatten Graph Docs to Include a Real Flattened Graph 8.x (#123900) (#123922) 2025-03-04 08:02:05 +11:00
index-modules [8.17] [DOCS] Concept cleanup 2 - ES settings (#119373) (#119643) 2025-01-10 10:31:05 -05:00
indices [DOCS] Update put mapping intro (#120248) 2025-02-28 10:29:28 +01:00
inference [8.17][DOCS] Fixes typo in PUT inference docs. (#125498) 2025-03-24 15:11:04 +01:00
ingest [8.17] Minor docs fixes (#126144) (#126153) 2025-04-02 13:02:08 -04:00
licensing [DOCS] More links to new API site (#119377) (#119418) 2024-12-31 20:21:46 +00:00
mapping Clarify doc values (#123309) (#123371) 2025-02-25 08:59:26 -05:00
migration Include enrich.cache_size breaking change in 8.16 doc (#118161) (#120449) 2025-01-20 18:22:08 +11:00
ml Adds note on anomaly detection alert behaviour (#126102) (#126443) 2025-04-08 15:59:21 +10:00
modules Mention zero-window state in networking docs (#124969) (#124971) 2025-03-17 07:41:56 +11:00
monitoring [AutoOps] Reference AutoOps solution on troubleshooting pages (#119630) (#120182) 2025-01-15 20:35:30 +11:00
query-dsl [DOCS] Opster Migration: Backport of nested bool query addition (#125064) (#125179) 2025-03-19 13:13:47 +11:00
query-rules/apis [DOCS] More links to new API site (#119377) (#119418) 2024-12-31 20:21:46 +00:00
quickstart [DOCS] Update getting-started.asciidoc (#116151) (#121174) 2025-01-30 00:52:28 +11:00
release-notes Add release notes for v8.17.4 release (#125450) 2025-03-24 15:30:37 +01:00
repositories-metering-api [DOCS] More links to new API site (#119377) (#119418) 2024-12-31 20:21:46 +00:00
reranking [DOCS] Add Elastic Rerank usage docs (#117625) (#117681) 2024-11-28 18:45:26 +11:00
rest-api Update missed documentation change for new watcher index settings (#125758) (#125926) 2025-03-31 20:55:32 +11:00
rollup [DOCS] More links to new API site (#119377) (#119418) 2024-12-31 20:21:46 +00:00
scripting [DOCS] Improve/fix documentation on stored scripts (#119921) (#119971) 2025-01-11 04:17:15 +11:00
search [DOCS] Fix link in RAG doc (#125077) (#125080) 2025-03-18 21:22:20 +11:00
search-application/apis [DOCS] More links to new API site (#119377) (#119418) 2024-12-31 20:21:46 +00:00
searchable-snapshots [8.17] [DOCS] More links to new API site (#119380) (#119419) 2025-01-01 10:06:07 +11:00
security [8.x][DOCS] Fixes typo on built-in role page. (#126211) (#126218) 2025-04-04 00:53:22 +11:00
settings [8.17] [DOCS] Concept cleanup 2 - ES settings (#119373) (#119643) 2025-01-10 10:31:05 -05:00
setup Minor fix in documentation (#119385) (#120995) 2025-01-28 21:23:36 +11:00
shutdown/apis [DOCS] More links to new API site (#119377) (#119418) 2024-12-31 20:21:46 +00:00
slm/apis [8.17] [DOCS] More links to new API site (#119380) (#119419) 2025-01-01 10:06:07 +11:00
snapshot-restore [8.17] [DOCS] Concept cleanup 2 - ES settings (#119373) (#119643) 2025-01-10 10:31:05 -05:00
sql [8.x] SQL: Docs: Drop examples of LIKE/RLIKE vs QUERY/MATCH equivalence #125970 (#126399) 2025-04-07 22:42:33 +10:00
synonyms/apis [8.17] [DOCS] More links to new API site (#119380) (#119419) 2025-01-01 10:06:07 +11:00
tab-widgets Changes elser service to elasticsearch service in the Semantic search with the inference API page (#118536) (#118545) 2024-12-12 22:43:58 +11:00
text-structure/apis [8.17] [DOCS] More links to new API site (#119380) (#119419) 2025-01-01 10:06:07 +11:00
transform [DOCS] Improve/fix documentation on stored scripts (#119921) (#119971) 2025-01-11 04:17:15 +11:00
troubleshooting Added additional entries for troubleshooting unhealthy cluster (#119914) 2025-01-15 19:57:40 +00:00
upgrade [8.17] [DOCS] Concept cleanup 2 - ES settings (#119373) (#119643) 2025-01-10 10:31:05 -05:00
vectors Correct bit * byte and bit * float script comparisons (#117404) (#117508) 2024-11-26 07:42:23 +11:00
watcher #104233 Allow Watcher Node Allocation Settings (#115251) (#115330) 2024-10-23 02:41:42 +11:00
aggregations.asciidoc Convert bucket aggs docs to runtime fields (#71202) 2021-04-02 12:12:06 -04:00
alias.asciidoc Adjusted alias doc for clarity (#120437) 2025-01-28 17:23:33 +01:00
analysis.asciidoc [DOCS] Add full-text search overview (#119462) (#119606) 2025-01-07 05:25:21 +11:00
api-conventions.asciidoc (Doc+) System Index definition (#120327) (#121147) 2025-01-29 21:41:20 +11:00
cat.asciidoc [DOCS] Link to new API site (#119038) (#119360) 2024-12-31 04:18:27 +11:00
cluster.asciidoc [8.17] [DOCS] Concept cleanup 2 - ES settings (#119373) (#119643) 2025-01-10 10:31:05 -05:00
data-management.asciidoc [8.17] [DOCS] Concept cleanup 2 - ES settings (#119373) (#119643) 2025-01-10 10:31:05 -05:00
data-rollup-transform.asciidoc [DOCS] Deprecate rollups (#101265) 2023-10-25 16:52:25 -04:00
data-store-architecture.asciidoc [8.17] [DOCS] Concept cleanup 2 - ES settings (#119373) (#119643) 2025-01-10 10:31:05 -05:00
datatiers.asciidoc Clarify docs around disk capacity expectation. (#115745) (#120490) 2025-01-21 16:37:12 +11:00
dependencies-versions.asciidoc [DOCS] Replace dependencies list with a link. Closes #84863 (#90694) 2022-11-09 14:37:55 -08:00
docs.asciidoc [DOCS] Concept cleanup (extracting conceptual docs from reference content pt I of ?) (#119016) (#119525) 2025-01-03 13:49:20 -05:00
geospatial-analysis.asciidoc Make spatial search functions not preview (#117489) (#117497) 2024-11-26 03:28:16 +11:00
gs-index.asciidoc
high-availability.asciidoc [DOCS] Concept cleanup (extracting conceptual docs from reference content pt I of ?) (#119016) (#119525) 2025-01-03 13:49:20 -05:00
how-to.asciidoc [DOCS] Rename how-to subsection, move recipes to search relevance (#117044) (#117046) 2024-11-20 04:53:03 +11:00
index-modules.asciidoc Fix invalid index mode (#118579) (#118584) 2024-12-13 03:29:12 +11:00
index.asciidoc [DOCS] Concept cleanup (extracting conceptual docs from reference content pt I of ?) (#119016) (#119525) 2025-01-03 13:49:20 -05:00
index.x.asciidoc
indices.asciidoc [DOCS] Link to new API site (#119038) (#119360) 2024-12-31 04:18:27 +11:00
ingest.asciidoc [DOCS] Port connector docs from Enterprise Search guide (#112953) (#113771) 2024-09-30 19:01:25 +10:00
intro.asciidoc [DOCS] Add full-text search overview (#119462) (#119606) 2025-01-07 05:25:21 +11:00
landing-page.asciidoc Adds hands-on learning for Search link to the landing page (#116007) (#116017) 2024-10-31 17:51:35 +01:00
links.asciidoc [DOCS] Rename ES Reference to ES Guide (#71198) 2021-04-01 15:38:41 -04:00
mapping.asciidoc [DOCS][101] Update first quick start with mappings examples (#113558) (#113972) 2024-10-03 04:28:07 +10:00
node-roles.asciidoc [8.17] [DOCS] Concept cleanup 2 - ES settings (#119373) (#119643) 2025-01-10 10:31:05 -05:00
nodes-shards.asciidoc [DOCS] Concept cleanup (extracting conceptual docs from reference content pt I of ?) (#119016) (#119525) 2025-01-03 13:49:20 -05:00
path-settings-overview.asciidoc [8.17] [DOCS] Concept cleanup 2 - ES settings (#119373) (#119643) 2025-01-10 10:31:05 -05:00
query-dsl.asciidoc Group vector queries into new section (#110722) 2024-07-11 14:45:35 +02:00
redirects.asciidoc Document new ip_location APIs (#116611) (#116615) 2024-11-12 06:24:17 +11:00
release-notes.asciidoc Add release notes for v8.17.4 release (#125450) 2025-03-24 15:30:37 +01:00
run-elasticsearch-locally.asciidoc Update quickstart overview, add local install instructions (#115746) (#115761) 2024-10-29 00:40:22 +11:00
scripting.asciidoc [DOCS] Add documentation for Painless field API (#83388) 2022-02-03 15:15:38 -05:00
search.asciidoc [DOCS] More links to new API site (#119377) (#119418) 2024-12-31 20:21:46 +00:00
setup.asciidoc [8.17] [DOCS] Concept cleanup 2 - ES settings (#119373) (#119643) 2025-01-10 10:31:05 -05:00
shard-request-cache.asciidoc [8.17] [DOCS] Concept cleanup 2 - ES settings (#119373) (#119643) 2025-01-10 10:31:05 -05:00
troubleshooting.asciidoc [AutoOps] Reference AutoOps solution on troubleshooting pages (#119630) (#120182) 2025-01-15 20:35:30 +11:00
upgrade.asciidoc [DOCS] Refactor book-scoped variables in docs/reference/index.asciidoc (#107413) 2024-04-17 14:37:07 +02:00