SG SSL without SG on ES v5.x

[askids]

Hi

I wanted to know is it possible to SG SSL with ES 5.5.x, but not use SG itself?

Also if I want to only enable SSL only on transport port, but not on the http port, is that something that can be done?

In other words, I am trying to see if I can only secure the node to node communication.

Thanks!

[SG]

yes, all that is possible

> --
> You received this message because you are subscribed to the Google Groups "Search Guard Community Forum" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to search-guard...@googlegroups.com.
> To post to this group, send email to search...@googlegroups.com.
> To view this discussion on the web visit https://groups.google.com/d/msgid/search-guard/9c6d8df1-138c-4fb6-a815-7758b79e7649%40googlegroups.com.
> For more options, visit https://groups.google.com/d/optout.

[askids]

Great. Can you please point me to documentation on how to set it up? I am unable to find it.

[Jochen Kressin]

You need to install the SSL plugin, this is available as a standalone version and can be installed like any other ES plugin, including Search Guard. Example:

bin/elasticsearch-plugin install com.floragunn:search-guard-ssl:5.4.0-22

All available versions of Search Guard SSL:

https://github.com/floragunncom/search-guard-ssl/wiki

Docs can be found here:

http://floragunncom.github.io/search-guard-docs/

TLS in particular:

http://floragunncom.github.io/search-guard-docs/tls_configuration.html