easyssl

An elasticsearch plugin adding ssl to both http(client-to-cluster) and transport(node-to-node) with several simple java files. It is simple, easy, and free. ##To install: plugin install https://github.com/elasticsearchssl/easyssl/blob/master/archive/2.4.4.zip?raw=true ##To configure:

• elasticsearch.yml:

    # When this plug-in in play, https is enabled between client and elasticsearch cluster.
    # To disable easyssl, you have to remove this plug-in.
    # Assuming your keystore contains key pair and certiface chains for this node, and trusted certificates of all nodes in the cluster.
    # Put your keystore in /concig directory of this node.
    # Replace the paswords with your own.
    # Alias is optional. if not specified, the first key entry in the store is used.
    # Default value of transport.ssl.enaled is true.
    #
    easyssl:
      keystore.file: ${path.home}/config/keystore.jks
      keystore.password: easyssl
      key.password: easyssl
      #key.alias:
      transport.ssl.enaled: true
  

* To grant elasticsearch the access to call Security.getProperty("ssl.KeyManagerFactory.algorithm"), add the line below to /bin/elasticsearch.sh after "export HOSTNAME":

  export JAVA_OPTS="${JAVA_OPTS} -Djava.security.policy=file://${ES_HOME}/plugins/easyssl/elasticsearch-security.policy"