A List of Useful TLS Links
Tags: TLS
CEO / Founder
Useful Links for Working With TLS
Oh, yes ... TLS is a very mixed bag. On the one hand, it is a de-facto standard, especially for encrypting data in transit. On the other hand, it still is complicated to work with if one has little previous experience.
Since TLS is one of the cornerstones of Search Guard Security, we have gained knowledge and insights over the years. We want to share this list of valuable articles and tutorials and try to ease the pain a bit ;)
Introduction to TLS
If you are not familiar with TLS, how it works and what it does, you might want to read our introductory posts about TLS and TLS certificates:
OpenSSL
OpenSSL is widely used for all things TLS, especially to create keys and certificates. Here are some articles to get started:
Introduction to OpenSSSL
How to Create your own Root CA with OpenSSL
How to Create TLS Certificates for Search Guard with OpenSSL
Cheat Sheets: Most Common OpenSSL Commands
Tools
Sometimes you want to get the job done and not bother about cryptic command line switches. Here are some tools to help you.
Keystore Explorer, a UI Tool for Inspecting Certificates
Convert SSL Certificates to and from Different Formats
TLS Tool for Creating Certificates Required to run Search Guard
Search Guard TLS Troubleshooting
If you are using TLS with Search Guard, these articles can help if you get stuck.
Step-by-step Troubleshooting Guide
Common TLS Error Messages and What They Mean
Certificate Revocation
Missing Something?
We will update this post from time to time to keep the information fresh and juicy. Do you miss something? Do you have a link you would like to see here? Please, by all means, drop us a note, we highly value your feedback!
Use our contact form
Send us a message on Twitter
Image: shutterstock / ArtemisDiana
Published: 2022-11-29
Questions? Drop us a line!
Other posts you may like
Proxy authentication using TLS certificates
Aki Abramowski || 2020-02-24
The new Search Guard proxy authentication module for Elasticsearch and Kibana supports IP as well as TLS certificate authentication.
read more
Common Elasticsearch TLS error messages
Jochen Kressin || 2020-09-22
How to debug common error messages when using TLS with Elasticsearch, Logstash, Beats and Search Guard.
read more
Changing Elasticsearch TLS certificates at runtime
Jochen Kressin || 2020-07-27
How to change and reload any TLS certificate on a running Elasticsearch cluster without any downtime or rolling restart.
read more
