I have installed Elasticsearch 7.1 on Ubuntu. I want to password protect the cluster, so I have set: xpack.security.enabled: true
in elasticsearch.yml
file. Now when I restart Elasticsearch I get the message:
Transport SSL must be enabled if security is enabled on a [basic] license. Please set [xpack.security.transport.ssl.enabled] to [true] or disable security by setting [xpack.security.enabled]
I am using the basic license. I have seen this guide which explains how to use elasticsearch-certutil
to install SSL certificates on the nodes.
Questions:
-
Is it possible to password protect the cluster without setting
xpack.security.transport.ssl.enabled
to true? -
If I have the guide mentioned above and install SSL certifiactes on elasticsearch cluster, do I need any ssl certificate on my webserver? I don’t want the communication between the web server and elasticsearch to use SSL.