|
1 | | - |
2 | 1 | ==== {component} TLS/SSL Settings |
3 | 2 | You can configure the following TLS/SSL settings. If the settings are not configured, |
4 | 3 | the {ref}/security-settings.html#ssl-tls-settings[Default TLS/SSL Settings] |
@@ -41,7 +40,13 @@ Supported cipher suites can be found in Oracle's http://docs.oracle.com/javase/8 |
41 | 40 | Java Cryptography Architecture documentation]. Defaults to the value of |
42 | 41 | `xpack.ssl.cipher_suites`. |
43 | 42 |
|
| 43 | +ifdef::asciidoctor[] |
| 44 | +[#{ssl-context}-tls-ssl-key-trusted-certificate-settings] |
44 | 45 | ===== {component} TLS/SSL Key and Trusted Certificate Settings |
| 46 | +endif::[] |
| 47 | +ifndef::asciidoctor[] |
| 48 | +===== anchor:{ssl-context}-tls-ssl-key-trusted-certificate-settings[] {component} TLS/SSL Key and Trusted Certificate Settings |
| 49 | +endif::[] |
45 | 50 |
|
46 | 51 | The following settings are used to specify a private key, certificate, and the |
47 | 52 | trusted certificates that should be used when communicating over an SSL/TLS connection. |
@@ -107,7 +112,13 @@ Password to the truststore. |
107 | 112 | +{ssl-prefix}.ssl.truststore.secure_password+ (<<secure-settings,Secure>>):: |
108 | 113 | Password to the truststore. |
109 | 114 |
|
| 115 | +ifdef::asciidoctor[] |
| 116 | +[#{ssl-context}-pkcs12-files] |
110 | 117 | ===== PKCS#12 Files |
| 118 | +endif::[] |
| 119 | +ifndef::asciidoctor[] |
| 120 | +===== anchor:{ssl-context}-pkcs12-files[] PKCS#12 Files |
| 121 | +endif::[] |
111 | 122 |
|
112 | 123 | {security} can be configured to use PKCS#12 container files (`.p12` or `.pfx` files) |
113 | 124 | that contain the private key, certificate and certificates that should be trusted. |
@@ -145,7 +156,13 @@ Password to the PKCS#12 file. |
145 | 156 | +{ssl-prefix}.ssl.truststore.secure_password+ (<<secure-settings,Secure>>):: |
146 | 157 | Password to the PKCS#12 file. |
147 | 158 |
|
| 159 | +ifdef::asciidoctor[] |
| 160 | +[#{ssl-context}-pkcs11-tokens] |
148 | 161 | ===== PKCS#11 Tokens |
| 162 | +endif::[] |
| 163 | +ifndef::asciidoctor[] |
| 164 | +===== anchor:{ssl-context}-pkcs11-tokens[] PKCS#11 Tokens |
| 165 | +endif::[] |
149 | 166 |
|
150 | 167 | {security} can be configured to use a PKCS#11 token that contains the private key, |
151 | 168 | certificate and certificates that should be trusted. |
|
0 commit comments