Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[8.1] Instructions to retrieve keystore pwd (#84340) #84934

Merged
merged 1 commit into from
Mar 15, 2022
Merged

[8.1] Instructions to retrieve keystore pwd (#84340) #84934

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
18 changes: 18 additions & 0 deletions docs/reference/setup/install/security-files-reference.asciidoc
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -16,3 +16,21 @@ Keystore that contains the key and certificate for the HTTP layer for this node.
`transport.p12`::
Keystore that contains the key and certificate for the transport layer for all
the nodes in your cluster.

`http.p12` and `transport.p12` are password-protected PKCS#12 keystores. {es}
stores the passwords for these keystores as <<secure-settings,secure
settings>>. To retrieve the passwords so that you can inspect or change the
keystore contents, use the
<<elasticsearch-keystore,`bin/elasticsearch-keystore`>> tool.

Use the following command to retrieve the password for `http.p12`:
[source,sh]
-------------------------
bin/elasticsearch-keystore show xpack.security.http.ssl.keystore.secure_password
-------------------------

Use the following command to retrieve the password for `transport.p12`:
[source,sh]
-------------------------
bin/elasticsearch-keystore show xpack.security.transport.ssl.keystore.secure_password
-------------------------