Skip to content
DataMiner DoJo

More results...

Generic selectors
Exact matches only
Search in title
Search in content
Post Type Selectors
Search in posts
Search in pages
Search in posts
Search in pages
Log in
Menu
  • Blog
  • Questions
  • Learning
    • E-learning Courses
    • Open Classroom Training
    • Certification
      • DataMiner Fundamentals
      • DataMiner Configurator
      • DataMiner Automation
      • Scripts & Connectors Developer: HTTP Basics
      • Scripts & Connectors Developer: SNMP Basics
      • Visual Overview – Level 1
      • Verify a certificate
    • Tutorials
    • Video Library
    • Books We Like
    • >> Go to DataMiner Docs
  • Expert Center
    • Solutions & Use Cases
      • Solutions
      • Use Case Library
    • Markets & Industries
      • Media production
      • Government & defense
      • Content distribution
      • Service providers
      • Partners
      • OSS/BSS
    • DataMiner Insights
      • Security
      • Integration Studio
      • System Architecture
      • DataMiner Releases & Updates
      • DataMiner Apps
    • Agile
      • Agile Webspace
      • Everything Agile
        • The Agile Manifesto
        • Best Practices
        • Retro Recipes
      • Methodologies
        • The Scrum Framework
        • Kanban
        • Extreme Programming
      • Roles
        • The Product Owner
        • The Agile Coach
        • The Quality & UX Coach (QX)
    • DataMiner DevOps Professional Program
  • Downloads
  • More
    • Feature Suggestions
    • Climb the leaderboard!
    • Swag Shop
    • Contact
      • General Inquiries
      • DataMiner DevOps Support
      • Commercial Requests
    • Global Feedback Survey
  • PARTNERS
    • All Partners
    • Technology Partners
    • Strategic Partner Program
    • Deal Registration
  • >> Go to dataminer.services

Elasticsearch TLS setup – Generating certificates using generate-tls-certificates.sh

Solved380 views24th January 2025Elasticsearch TLS
0
Andrew Teoh [DevOps Member]132 3rd October 2024 0 Comments

Hi,

I was attempting the enable TLS for my Elasticsearch setup. I am following the guide found here: Securing the Elasticsearch database | DataMiner Docs

When I was attempting to generate the TLS certificates using the "generate-tls-certifcates.sh" script, I encountered the following errors. The p12 files were still generated but when configured in the Elasticsearch instance, the service would not start.

I was hoping to get some guidance on this issue. I used the OpenSSL (v3.2.3) executable from the Git install (as recommended by the script's Git page) and the "keytool.exe" from OpenJDK 23 (again, as recommended by the script's Git page).

Or, would it be able to generate the PKCS12 file using a CSR?

Any help would be appreciated. If further info is needed, please let me know.

Thanks!

Andrew Teoh [DevOps Member] Selected answer as best 24th January 2025

1 Answer

  • Active
  • Voted
  • Newest
  • Oldest
0
Seppe Dejonckheere [SLC] [DevOps Advocate]2.21K Posted 3rd October 2024 1 Comment

Hi,

I'm assuming you are using the powershell version of the script because you have to provide the paths to the keytool and openssl.

I had a look at the script and noticed it was not properly formatting the Subject Alternative Names configuration, causing a parsing error in openssl when generating the certificates, which led to incomplete p12 files in the end.

I fixed the issue and merged it into the Github repository, so downloading the script again should solve your problem.

If you would encounter any other issues, don't hesitate to reach out.

Kind regards,

Andrew Teoh [DevOps Member] Selected answer as best 24th January 2025
Andrew Teoh [DevOps Member] commented 3rd October 2024

Hi Seppe,

Yes, I’m using the powershell version. Thanks for the quick fix. Let me try it again.

Please login to be able to comment or post an answer.

My DevOps rank

DevOps Members get more insights on their profile page.

My user earnings

0 Dojo credits

Spend your credits in our swag shop.

0 Reputation points

Boost your reputation, climb the leaderboard.

Promo banner DataMiner DevOps Professiona Program
DataMiner Integration Studio (DIS)
Empower Katas

Recent questions

Redundancy Groups and Alarming – Duplicate Alarms 0 Answers | 0 Votes
Correlation Engine: “Test rule” doesn’t result in a hit, despite functional rule 1 Answer | 3 Votes
When using the Setter = true attribute, will the copy action always be executed first? 1 Answer | 3 Votes

Question Tags

adl2099 (115) alarm (62) Alarm Console (82) alarms (100) alarm template (83) Automation (223) automation scipt (111) Automation script (167) backup (71) Cassandra (180) Connector (109) Correlation (69) Correlation rule (52) Cube (150) Dashboard (194) Dashboards (188) database (83) DataMiner Cube (57) DIS (81) DMS (71) DOM (140) driver (65) DVE (56) Elastic (83) Elasticsearch (115) elements (80) Failover (104) GQI (159) HTTP (76) IDP (74) LCA (152) low code app (166) low code apps (93) lowcodeapps (75) MySQL (53) protocol (203) QAction (83) security (88) SNMP (86) SRM (337) table (54) trending (87) upgrade (62) Visio (539) Visual Overview (345)
Privacy Policy • Terms & Conditions • Contact

© 2025 Skyline Communications. All rights reserved.

DOJO Q&A widget

Can't find what you need?

? Explore the Q&A DataMiner Docs

[ Placeholder content for popup link ] WordPress Download Manager - Best Download Management Plugin