From the course: Complete Guide to Open Source Security

Unlock the full course today

Join today to access over 24,800 courses taught by industry experts.

Upgrading Kibana to HTTPS

Upgrading Kibana to HTTPS

- [Instructor] We have a running seam in which Kibana and Elastic Search communicates across http. If we believe there's a risk of interception, then we can reconfigure ELK stack to use https. This isn't necessary for the workshop environment, but it's good practice in production environments. The first thing we need to do is to create the root certificate and the Kibana certificate that we need. So we'll run this as root sudo su, and we run usr/share/elasticsearch/bin/ elasticsearch-certutil ca (keyboard clacks) for our certificate authority, and we'll take the default output file, and we won't put a password on it. We'll now use this ca certificate to create a Kibana certificate. So again, we're certutil and the cert --ca is our elastic-stack-ca.p12 that we've just created, and we'll make the dns elkstack as this is the server that's delivering it and the output certificate will be kibana-server-p12, and our password is blank, and the password for the Kibana server is blank. Okay…

Contents