opensearch 证书找不到

Question

接触opensearch过程中用官方文档提供的docker-compose.yml文件 在虚拟机中运行了 opensearch集群和opensearch-dashboard 往下看到java实示例代码

    System.setProperty("javax.net.ssl.trustStore", "/full/path/to/keystore");
    System.setProperty("javax.net.ssl.trustStorePassword", "password-to-keystore");
//Establish credentials to use basic authentication.
    //Only for demo purposes. Don't specify your credentials in code.
    final CredentialsProvider credentialsProvider = new BasicCredentialsProvider();

    credentialsProvider.setCredentials(AuthScope.ANY,
      new UsernamePasswordCredentials("admin", "admin"));

    //Create a client.
    RestClientBuilder builder = RestClient.builder(new HttpHost("localhost", 9200, "https"))
      .setHttpClientConfigCallback(new RestClientBuilder.HttpClientConfigCallback() {
        @Override
        public HttpAsyncClientBuilder customizeHttpClient(HttpAsyncClientBuilder httpClientBuilder) {
          return httpClientBuilder.setDefaultCredentialsProvider(credentialsProvider);
            }
          });

这里面/full/path/to/keystore 和password-to-keystore应该填什么呢

Answer 1

以下内容部分参考ChatGPT模型：

---

你需要在opensearch集群和opensearch-dashboard中配置证书，这样才能进行安全通信。具体操作可以参考官方文档，其中包括生成证书和配置证书的步骤。如果证书找不到，可以检查证书路径是否正确，以及证书文件是否存在。如果仍然找不到，可以尝试重新生成证书并进行配置。以下是一个示例代码块，用于创建证书：

# 创建证书
bin/elasticsearch-certutil ca
bin/elasticsearch-certutil cert --ca elastic-stack-ca.p12

# 配置opensearch集群
opensearch.yml:
opendistro_security.ssl.transport.pemcert_filepath: <path to certificate>
opendistro_security.ssl.transport.pemkey_filepath: <path to key>
opendistro_security.ssl.transport.pemtrustedcas_filepath: <path to CA certificate>

# 配置opensearch-dashboard
opensearch_dashboad.yml:
opendistro_security.ssl.key: <path to key>
opendistro_security.ssl.cert: <path to certificate>
opendistro_security.ssl.certificateAuthorities: <path to CA certificate>

---

如果我的建议对您有帮助、请点击采纳、祝您生活愉快