Using new certificates & key

Author: Chris Wiechmann

DEVELOPMENT.MD

@@ -1,4 +1,4 @@
-## Steps to create a release
+## Create a release
 
 ### Bump version
 - docker-compose.yml
@@ -10,4 +10,64 @@
 - Add recent changes
 
 ### Create the release
-- Create a new release on Github with the tag name: v2.0.0
+- Create a new release on Github with the tag name: v2.0.0
+
+## Create the shipped certificates
+
+To generate the sample keys and certificates we a using the Elasticsearch cert-util: 
+https://www.elastic.co/guide/en/elasticsearch/reference/current/certutil.html
+
+Within a running Elasticsearch instance docker container:  
+`docker exec -it elasticsearch1 sh`
+
+Create an instances.yml in the Elasticsearch home directory:  
+```yml
+instances:
+  - name: "elasticsearch1"
+    dns:
+      - "elasticsearch1"
+      - "localhost"
+      - "api-env"
+      - "*.ec2.internal"
+      - "*.compute-1.amazonaws.com"
+      - "*.cloudapp.azure.com"
+  - name: "elasticsearch2"
+    dns:
+      - "elasticsearch2"
+      - "localhost"
+      - "api-env"
+      - "*.ec2.internal"
+      - "*.compute-1.amazonaws.com"
+      - "*.cloudapp.azure.com"
+  - name: "elasticsearch3"
+    dns:
+      - "elasticsearch3"
+      - "localhost"
+      - "api-env"
+      - "*.ec2.internal"
+      - "*.compute-1.amazonaws.com"
+      - "*.cloudapp.azure.com"
+  - name: "kibana"
+    dns:
+      - "kibana"
+      - "localhost"
+      - "api-env"
+      - "*.ec2.internal"
+      - "*.compute-1.amazonaws.com"
+      - "*.cloudapp.azure.com"
+  - name: "apibuilder4elastic"
+    dns:
+      - "apibuilder4elastic"
+      - "api-builder"
+      - "localhost"
+      - "api-env"
+      - "*.ec2.internal"
+      - "*.compute-1.amazonaws.com"
+      - "*.cloudapp.azure.com"
+```
+
+Run elasticsearch-certutil:  
+`bin/elasticsearch-certutil cert --silent --in instances.yml --out sample-certificates.zip --pass axway --pem --keep-ca-key`
+
+Copy the ZIP-File:  
+`docker cp elasticsearch1:/usr/share/elasticsearch/sample-certificates.zip .`

config/certificates/README.md

@@ -1,4 +1,6 @@
 Certificates in this folder will be made available to the Docker-Containers by a mount 
 and configured in the .env file.  
 If you would to use your own certificates and keys, place them in this directory and 
-adjust the .env file accordingly.
+adjust the .env file accordingly.
+It's important that you are using different filenames, as the original files will be 
+replaced with the next version.

config/certificates/apibuilder4elastic.crt

@@ -1,21 +1,22 @@
 -----BEGIN CERTIFICATE-----
-MIIDfjCCAmagAwIBAgIUNKRskidrEZsRd8Vwn/3FoZr/M9YwDQYJKoZIhvcNAQEL
-BQAwNDEyMDAGA1UEAxMpRWxhc3RpYyBDZXJ0aWZpY2F0ZSBUb29sIEF1dG9nZW5l
-cmF0ZWQgQ0EwHhcNMjAwOTI1MDYwNTQ3WhcNMzAwOTIzMDYwNTQ3WjAdMRswGQYD
-VQQDExJhcGlidWlsZGVyNGVsYXN0aWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
-ggEKAoIBAQCUF0ucA8TiIAlpswLgc4wJbkQzOOVH8l/aDiCnW683s5L3FEOlepsc
-fmfi9tP9QMGquYKci2T5sKIdKGPRCr49+4eHeh935dfYMZC/sZa/9NehcNDUkGLB
-SIwSl/K/dToZ3eT8OHfVuD98thUsyek934Nq3zTEgLftZIVV8ePEA/O63C71Wyco
-EYfWibXxn+ZLmVimSkxywKrfvOhKpHnFpBkdaOWLuNANN/+BT1hlRWqLlOvekxDR
-RB+koYUFVyhPYWtX+AOeAuvrbB1hygD8Lzmqaq5KasszD7J6axjQkyhP+bfVsdid
-G5/jcuVf10kTWPfP20c2QDrsZxgD2gBXAgMBAAGjgZ4wgZswHQYDVR0OBBYEFIqO
-9ulr0Nh7cWpQJG/zlNuWQTd3MB8GA1UdIwQYMBaAFDUmPlW2yPbROrn5tQAOGgZQ
-8m7YME4GA1UdEQRHMEWCCWxvY2FsaG9zdIISYXBpYnVpbGRlcjRlbGFzdGljggth
-cGktYnVpbGRlcoIHYXBpLWVudoIOKi5lYzIuaW50ZXJuYWwwCQYDVR0TBAIwADAN
-BgkqhkiG9w0BAQsFAAOCAQEAV/bV2Ldlpa7KItahCVFtZYlFd+/bFoiRAXJB+s2i
-tXGDUM1k7sKL0vHBs7D3g46PVDM3riZQIaheaeqsvT7THdkzfjEUCSDo6cIM0QiO
-Kl8WAwb804/CQBu429dLmmn1dp/Ks7TmlC0cxfXr4hPI8aIEw/qt5zjwVk2DNSZR
-ym+nCPV9L/LsV2H10nsCOgUqyU3/+23H6YBOFgL3sl5dMguniW/ldhoCPxudwZuY
-9DIydglzCoqvUNdlVfJPVk5vUInm4369OlThVD2vS/wfUns9gEzDo98yGEeYfLk9
-QgR7My3hG/nj6vjwoO8oG7SfKccQiSE1nZJ3gZerFuCNtg==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 -----END CERTIFICATE-----

config/certificates/apibuilder4elastic.key

@@ -1,27 +1,30 @@
 -----BEGIN RSA PRIVATE KEY-----
-MIIEogIBAAKCAQEAlBdLnAPE4iAJabMC4HOMCW5EMzjlR/Jf2g4gp1uvN7OS9xRD
-pXqbHH5n4vbT/UDBqrmCnItk+bCiHShj0Qq+PfuHh3ofd+XX2DGQv7GWv/TXoXDQ
-1JBiwUiMEpfyv3U6Gd3k/Dh31bg/fLYVLMnpPd+Dat80xIC37WSFVfHjxAPzutwu
-9VsnKBGH1om18Z/mS5lYpkpMcsCq37zoSqR5xaQZHWjli7jQDTf/gU9YZUVqi5Tr
-3pMQ0UQfpKGFBVcoT2FrV/gDngLr62wdYcoA/C85qmquSmrLMw+yemsY0JMoT/m3
-1bHYnRuf43LlX9dJE1j3z9tHNkA67GcYA9oAVwIDAQABAoIBAEFY0jVi+GLrzhuF
-MXTHp/iVXqTXq10HF8LJzyDqdTP4GpbKq1r+8iktojvlvP+YrpzeRUM8w27mwXJq
-WzloKzCAqHpgqjgnBQrSPFRKUgIcUXZcqNnTaLBvide+kxBm8x9s6dleNYrqRaGL
-W2arJi/2TDBBlDBNuFuZqriVB3N7ucK56P8KCfM9C5lXdrTf0UOOqR73AuJ1jeil
-Hl7lplmF0589UtlfpViSjDJuMigPalVhJ1j6hC3pQeCra4t0+514Qj7n+71OEBNA
-nbcclqga1ZQukKCFT2soDAB1oRmzkEgEdO8loJYzXoysFJAmHgc/5WAS9Jjglyid
-QITNvEkCgYEA3NTfrazahfL04hIwdRsj7Tzu5cplHNz+pqK527xldMCnIVfOhy/T
-p4PSU9S1oj8p5Tj8rNbdYtFq3iBtPBZSz/te6XDob1JHNeDFW4noMXj/SYunzga2
-F1EWdIq90AGWl2yUaifA43X+wQXfMh/Dcahkxfsk/ooOg7y6BLmaniMCgYEAq6zY
-+69APPPcjugqH4YJ5pjOitofpdtHsSqd1yZGjP1Ng4XSlHnPw8lfrfwgSbt58eXm
-1uYyL6D+BX1Sx3qBzKJ6US/VbDgHncZOMKr0MurzIBl75l8vGqdnD/Pt5Hk4Mf7E
-9kHt4R8cVTGrGEMSieLQmlLoXUO8OjUd2kWUhj0CgYBoLi1QPAnjw5jvxnEB7knm
-tCZoVjGZilDAwGg6WAjtKa4vNsOCV3fcwX3KesEtx+q170qVJ9DNu8pU/KtL+6QZ
-5pcCPngJfKGHs4CoDMlz/YdCZRZHRjdFjMWxOXsO1JD84waphhOju5jx6xk/Bmko
-B69zD2aGhw8N600+yWk+TQKBgGZqSlPzm9YBAS478I030IZB2M3bDJBMfbuCmgE1
-M1d+8ZQp7JNpC/pYEv1fcP+rmTcnGQxQ7dWeLIyn1A9u1Sp4L5Jpf9/8mQaVvCWq
-ht4tbfdTXKf1VsuG3KQWuG/ZpR2mSGhEsp3fim6En/ZsZQ3fQuUd2sNw2kS7VWDW
-q6FdAoGAaKBiKza0Sc+80WzfHilFHOCM1zdFsx9xqIFONJQZ4wjX7qvXqXkJC3sc
-5xR7O4VilRaYXtyzf6zAcg79bhClaPZfPKF+HwsX/CBaUE2cnyu67m9gjtst8gVt
-J+IXvLjcgNXlH8TZTQwxHZhfPfUEx55UYAqIa8KbtWsRgICcSkM=
+Proc-Type: 4,ENCRYPTED
+DEK-Info: AES-128-CBC,0E999AE51DF7CE5E388E0E40A93D44F1
+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 -----END RSA PRIVATE KEY-----

config/certificates/ca.crt

@@ -1,20 +1,20 @@
 -----BEGIN CERTIFICATE-----
-MIIDSjCCAjKgAwIBAgIVAMrFEp12q826pXOoFMl2bsMa7fdPMA0GCSqGSIb3DQEB
-CwUAMDQxMjAwBgNVBAMTKUVsYXN0aWMgQ2VydGlmaWNhdGUgVG9vbCBBdXRvZ2Vu
-ZXJhdGVkIENBMB4XDTIwMDkyNTA2MDU0NloXDTMwMDkyMzA2MDU0NlowNDEyMDAG
-A1UEAxMpRWxhc3RpYyBDZXJ0aWZpY2F0ZSBUb29sIEF1dG9nZW5lcmF0ZWQgQ0Ew
-ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVfR/5Tw1yQuPdITmZuDHu
-kIojLl7nf9PXupZlb5wPi+c14lDAbdTDS+Yt57GT/fXpLqacuGhKVp2usHv8d4BT
-/KoXd7/1x/uNtw/3uGGbAQeapLh0kXqz/xPyr2sskhSxa5hhJHo7NvxcUjwcpGb8
-QRJ793EvTnwQrZD2ShmDCeiBqpne2uBGuJcKkTE/awQtMjX7457eoG/NKgzb7Jdc
-MLxGnCCll874yDm8cykbpClwSVXnDb61zhpVoX6sSZR0WAndFv71Bda5nJlLYD+l
-sX3qMzEf7nbznc3j5w8sg6RAB82O0u8qx8amcwCCtaW5716oDkxKyFfGeBQUf+o1
-AgMBAAGjUzBRMB0GA1UdDgQWBBQ1Jj5Vtsj20Tq5+bUADhoGUPJu2DAfBgNVHSME
-GDAWgBQ1Jj5Vtsj20Tq5+bUADhoGUPJu2DAPBgNVHRMBAf8EBTADAQH/MA0GCSqG
-SIb3DQEBCwUAA4IBAQA1QtAY3iBNpVO5XlAsvvUFYpH0t8MrFAWP1msvTe3jDRQ3
-56LaBLHDxT/lV0xb934Ew2BFvVca/SsWniNtW/cjrLS9FfiuwW5kNPIFXWbg8HTC
-J1qOJq17tIzOjgX95DbZbUAxAgwBQfLc1HtS7zw1+cbVB+qaNrjDZNO3i/bG5jI4
-URYmzn3vLqEya8dsEv5Yv+cBp+FWmcrzngunKCoEwEutCvLFCg4MfeMkpTiJq90v
-XuICt/4BfAqQSUY6TN3X7G6fGH7z6KLEN9X8Xinforf5N/lsQa89x9kcw1sj0iLT
-XmH05QMJKbomwAafpGYius2eYf+8WFHvSGI+VlGl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 -----END CERTIFICATE-----

config/certificates/ca.key

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

config/certificates/elasticsearch1.crt

@@ -1,21 +1,21 @@
 -----BEGIN CERTIFICATE-----
-MIIDajCCAlKgAwIBAgIVAKAWi/XMEL6ADrivqLrlMpOGb9k/MA0GCSqGSIb3DQEB
+MIIDhTCCAm2gAwIBAgIVAPUgxA2xX8d0qkYTlEJMUmLiZCQTMA0GCSqGSIb3DQEB
 CwUAMDQxMjAwBgNVBAMTKUVsYXN0aWMgQ2VydGlmaWNhdGUgVG9vbCBBdXRvZ2Vu
-ZXJhdGVkIENBMB4XDTIwMDkyNTA2MDU0N1oXDTMwMDkyMzA2MDU0N1owGTEXMBUG
+ZXJhdGVkIENBMB4XDTIxMDExMjEzMzYxOFoXDTI0MDExMjEzMzYxOFowGTEXMBUG
 A1UEAxMOZWxhc3RpY3NlYXJjaDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
-AoIBAQCm+Za/e90inS6Ksa9mD4M0vSPuD0xmGiEEXnEsJjNxN0oVmJkQgj2/rEMC
-XdoErASjUUcPfdODl2eqSvegpHO3TzPBf67KITPAOInmZITfThXz3FEvvi+p4Qx5
-srVUlO4jIgnolB03HqdZOjdMcvH55tKn+Q22Vhu1kdrafbozKAPox+pJaIaN6yNV
-63ijXhX/aEyoCwEc7Ni8xvxzDlajB3BzK/QeBQbvG6IF5yzyuWvbvq3ImPTQ7FpP
-sNdXZt9DnvB4x8InEh6eBR6z7Sur5pxSfiYVYbQ9AbESNCXVZkbCn3Hf2wi/21QZ
-uk0SuQq8VbcQjCMZAmBg+s99LBEDAgMBAAGjgY0wgYowHQYDVR0OBBYEFHHfPxsN
-Is7NSRyFa9Y9qWGVh4AfMB8GA1UdIwQYMBaAFDUmPlW2yPbROrn5tQAOGgZQ8m7Y
-MD0GA1UdEQQ2MDSCCWxvY2FsaG9zdIIHYXBpLWVudoIOZWxhc3RpY3NlYXJjaDGC
-DiouZWMyLmludGVybmFsMAkGA1UdEwQCMAAwDQYJKoZIhvcNAQELBQADggEBADW3
-yJ/Jd5I3hd27ORiC+kvqYS1wVVJIizJ2O8BoaE3zXg7Dk/ngJK8wnKcASOw056r8
-4wdpBvRto2MpHs04nNzVAGm51NvCTWdxRhTKFGTp1E6GchV2/JL6n+FDC4PQrDSX
-BtGKrOhlSDJKRVBzS6SpzhhJ/6SO/InFcpGT+QmLWv//UkFoSd3ycDNhUFLfsG6T
-AHhQmj6QR4JQN/vvXymtUn5O7gFQ+6lAlZV1e6141PF3v39dOF9WzsKfCTO/H9UT
-bvfhYSsvtBY4I4Sj4W/GgAF6T6cOE3mz5LlMHaMwdbQ+JCFHDNk9XIpeB6FB5ShJ
-djNlkji5lVTJiJXZgjY=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 -----END CERTIFICATE-----

config/certificates/elasticsearch1.key

@@ -1,27 +1,30 @@
 -----BEGIN RSA PRIVATE KEY-----
-MIIEowIBAAKCAQEApvmWv3vdIp0uirGvZg+DNL0j7g9MZhohBF5xLCYzcTdKFZiZ
-EII9v6xDAl3aBKwEo1FHD33Tg5dnqkr3oKRzt08zwX+uyiEzwDiJ5mSE304V89xR
-L74vqeEMebK1VJTuIyIJ6JQdNx6nWTo3THLx+ebSp/kNtlYbtZHa2n26MygD6Mfq
-SWiGjesjVet4o14V/2hMqAsBHOzYvMb8cw5Wowdwcyv0HgUG7xuiBecs8rlr276t
-yJj00OxaT7DXV2bfQ57weMfCJxIengUes+0rq+acUn4mFWG0PQGxEjQl1WZGwp9x
-39sIv9tUGbpNErkKvFW3EIwjGQJgYPrPfSwRAwIDAQABAoIBAFlfIibfn18VjoHB
-1UXla67gxch3+8ZymdWCz0R4NfSVSVwBz3ucmnxrMXqkzTrO77SSnlxWVs4KTfxC
-IASlwSIOjH83XlDmMJLkMDtW9h+n5ewesn3BaDWfNVQ2KQRaqpO3dmI8VN7Z02zY
-0hxjMc02lO4/Se2cbTxkEyX7QZx7IKBUqfeMuUQuu+S2M5LHhcfmOQRVwUq2DKWg
-gYDzjNIIPXe8haxlYtL+tm8N73uwcLGRubd6g16pSvkYZAv8wqlSAnw2UjWlnUag
-uc4TWZGuCUjz9LeMJ92xMLmg5mOcInk2on6YNh+0JZJJAHGykmOSDNMlGY1Dc8H5
-UBn4/iECgYEA8PIj3k7Cdzv3qiJT3NmffkTYOgW7SaNUIv8Uc/CDJSFygId1QlMK
-6iqjWK07+4ps/qh/Adn4QiRAiyF6xfuiU0mbTWml4AdDBFf7cmwtDqdUweeLwCrE
-UlkaBk7McxPwZRCa+GS42A0PYFeXefj5vEdqMY5B3mnpgE5Apos6zBsCgYEAsWhO
-LRTUNOI7or70XUQcF0I0K17I0qKDmBlLMxkM6PtC4cNEoXfB2a5nbqfSA7l7d4FC
-8kL9vdT3ScFYDbxjPqzl/moEGrLhSFZBBJwT9KM/BzhrwISJzHx7+XHQ4JGnlJ5R
-v4S3zxwiZS5Yz1+cc1NF3j6BsvCYzVnCIPsZzTkCgYEAgF8yNw5VU7uSf4Xcko0s
-CdVaMse8+kXX3PF0jzT0WoMQg2QoWFbwOMTQ1L0veRxOZ/uT94OPXoX8EWScCgHA
-gYl1AfCo3Mxhq13I7TSvaOBEKy9XaOIgSROJ5xRyn1lfOil3t6HKTenfaGAip2y8
-edC+xnpZo8tgCeknTtRdVkMCgYAYmo+k/uuDPhDpPDRlrul6bEsR7L5LQBCiCnf8
-aS/6K8aVyt/8yMAQsXhUx19/9rxh0YJ4WMQaDKwTBYZxuTvGWHI5O3jAPyixQI0Z
-14+I8Q7vsGp5M6hsvKLw8FD4pBqqqN5Lglt/lLZMdAYLFIZ9FAJvlRmluGpoqFcc
-/dYROQKBgFXsAkrUUxUkO5M5oSNNgtw/1b63TRpYODNc64jNa9ciovT/u3MCutPY
-F9F1FhfPxtj2Rzlknqg/X4vkMoBdri8FXyFAeK6WzQ9ykZpm3W34hYyq+/ixyUe+
-aXqW6hLWI542wDzjJnuupRGFzrswQAbDXxt5xXz3JVmkIiIvDxkA
+Proc-Type: 4,ENCRYPTED
+DEK-Info: AES-128-CBC,4E2B62A45C916177D323C82CA243DC9D
+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 -----END RSA PRIVATE KEY-----

config/certificates/elasticsearch2.crt

@@ -0,0 +1,21 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----