snippetbashTip

elasticsearch-certutil — Generate and manage SSL certificates for Elasticsearch security. More information: <https://www.elas

Submitted by: @import:tldr-pages·Mar 2, 2026·

Viewed 0 times

sslelasticsearch-certutilcertificatescommandandclimanagegenerate

Problem

How to use the elasticsearch-certutil command: Generate and manage SSL certificates for Elasticsearch security. More information: <https://www.elastic.co/docs/reference/elasticsearch/command-line-tools/certutil>.

Solution

elasticsearch-certutil — Generate and manage SSL certificates for Elasticsearch security. More information: <https://www.elastic.co/docs/reference/elasticsearch/command-line-tools/certutil>.

Generate a new Certificate Authority (CA) with default options:

elasticsearch-certutil ca

Generate a new certificate using the built-in CA:

elasticsearch-certutil cert

Generate certificates non-interactively and output PEM files:

elasticsearch-certutil cert {{[-s|--silent]}} --pem

Generate HTTP certificates with the built-in CA:

elasticsearch-certutil http

Generate transport certificates non-interactively:

elasticsearch-certutil transport {{[-s|--silent]}}

Generate a certificate signing request (CSR):

elasticsearch-certutil csr

Generate encrypted keystore passwords:

elasticsearch-certutil password

Generate a keystore password with a specified value:

elasticsearch-certutil password --pass {{password}}

Code Snippets

Generate a new Certificate Authority (CA) with default options

elasticsearch-certutil ca

Generate a new certificate using the built-in CA

elasticsearch-certutil cert

Generate certificates non-interactively and output PEM files

elasticsearch-certutil cert {{[-s|--silent]}} --pem

Generate HTTP certificates with the built-in CA

elasticsearch-certutil http

Generate transport certificates non-interactively

elasticsearch-certutil transport {{[-s|--silent]}}

Context

tldr-pages: common/elasticsearch-certutil

Revisions (0)

No revisions yet.