Skip to content
This repository was archived by the owner on Dec 14, 2022. It is now read-only.

Commit 8085b61

Browse files
author
Chris Wiechmann
committed
[skip ci] Important note: Don't use keys/certi shipped in Prod
1 parent afcae56 commit 8085b61

File tree

2 files changed

+13
-8
lines changed

2 files changed

+13
-8
lines changed

README.md

Lines changed: 7 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -645,17 +645,21 @@ To activate these changes the Filebeat service must be restarted.
645645

646646
_If you are using an existing Elasticsearch cluster, you have to provide the required CA to the solution to allow certificate validation._
647647

648-
The project is shipped with long running certificates/keys that should help you to get started with the solution. For a production environment these certificates and keys should be replaced with custom certificates.
648+
The project is shipped with sample long running certificates/keys that should help you to get started with the solution. For a production environment these certificates and keys should be replaced with custom certificates, as the sample certificates & key are public available on GitHub.
649649

650650
After you have created the corresponding certificates and keys based on your CA, you must save them in the folder: `certificates`.
651651
Afterwards these certificates must be configured in the `.env` file.
652652
```
653653
API_BUILDER_SSL_KEY=config/certificates/corporate-certificate.key
654654
API_BUILDER_SSL_CERT=config/certificates/corporate-certificate.crt
655655
API_BUILDER_SSL_KEY_PASSWORD=dfslkjaskljdklasjdlas
656-
ELASTICSEARCH_KEY=config/certificates/corporate-elasticsearch.key
657-
ELASTICSEARCH_CRT=config/certificates/corporate-elasticsearch.crt
658656
ELASTICSEARCH_CA=config/certificates/corp-ca.crt
657+
ELASTICSEARCH1_KEY=config/certificates/corporate-elasticsearch.key
658+
ELASTICSEARCH1_CRT=config/certificates/corporate-elasticsearch.crt
659+
ELASTICSEARCH2_KEY=config/certificates/corporate-elasticsearch.key
660+
ELASTICSEARCH2_CRT=config/certificates/corporate-elasticsearch.crt
661+
ELASTICSEARCH3_KEY=config/certificates/corporate-elasticsearch.key
662+
ELASTICSEARCH3_CRT=config/certificates/corporate-elasticsearch.crt
659663
KIBANA_KEY=config/certificates/corporate-kibana.key
660664
KIBANA_CRT=config/certificates/corporate-kibana.crt
661665
```

config/certificates/README.md

Lines changed: 6 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,7 @@
1-
Certificates in this folder will be made available to the Docker-Containers by a mount
2-
and configured in the .env file.
3-
If you would to use your own certificates and keys, place them in this directory and
4-
adjust the .env file accordingly.
5-
It's important that you are using different filenames, as the original files will be
1+
# Sample certificates for testing only
2+
3+
The sample certificates in this folder will be automatically made available to the Docker-Containers by a mount and are pre-configured in the .env file.
4+
:point_right: It's stringly recommended that you use your own certificates and keys as the __certificates & keys are public on GitHub__.
5+
6+
Place you own certificates and keys in this directory and adjust the .env file accordingly. It's important that you are using different filenames, as the original files will be
67
replaced with the next version.

0 commit comments

Comments
 (0)