forked from docs/doc-exports
zhengxiu
93d856d5c5
Reviewed-by: Pruthi, Vineet <vineet.pruthi@t-systems.com> Co-authored-by: zhengxiu <zhengxiu@huawei.com> Co-committed-by: zhengxiu <zhengxiu@huawei.com>
16 lines
3.7 KiB
HTML
16 lines
3.7 KiB
HTML
<a name="EN-US_TOPIC_0000001933318574"></a><a name="EN-US_TOPIC_0000001933318574"></a>
|
|
|
|
<h1 class="topictitle1">How Do I Modify the TLS Algorithm for a CSS Cluster?</h1>
|
|
<div id="body0000001111197590"><p id="EN-US_TOPIC_0000001933318574__p16762141220530">The TLS algorithm can be modified for Elasticsearch 7.6.2 and later as well as OpenSearch clusters.</p>
|
|
<ol id="EN-US_TOPIC_0000001933318574__ol188666331330"><li id="EN-US_TOPIC_0000001933318574__li118641125917"><span id="EN-US_TOPIC_0000001933318574__ph4222205142920">Log in to the CSS management console.</span></li><li id="EN-US_TOPIC_0000001933318574__li1125444523214">In the navigation pane on the left, expand <strong id="EN-US_TOPIC_0000001933318574__b594018131716">Clusters</strong>. Select a cluster type based on the target cluster. The cluster list is displayed.</li><li id="EN-US_TOPIC_0000001933318574__li3221165815598">In the cluster list, click the name of the target cluster. The cluster information page is displayed.</li><li id="EN-US_TOPIC_0000001933318574__li144141039617">Choose <strong id="EN-US_TOPIC_0000001933318574__b7161187111">Cluster Settings</strong> > <strong id="EN-US_TOPIC_0000001933318574__b71715183111">Parameter Settings</strong>.</li><li id="EN-US_TOPIC_0000001933318574__li229325643518">Click <strong id="EN-US_TOPIC_0000001933318574__b11203413118">Edit</strong>, expand <strong id="EN-US_TOPIC_0000001933318574__b873412452011">Custom</strong>, and click <strong id="EN-US_TOPIC_0000001933318574__b187332489119">Add</strong>.<ul id="EN-US_TOPIC_0000001933318574__ul7370413194219"><li id="EN-US_TOPIC_0000001933318574__li18370191315423">For an Elasticsearch cluster, add the <strong id="EN-US_TOPIC_0000001933318574__b949173413421">opendistro_security.ssl.http.enabled_ciphers</strong> parameter and set it to <strong id="EN-US_TOPIC_0000001933318574__b184915342426">['TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256', 'TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384']</strong>.</li><li id="EN-US_TOPIC_0000001933318574__li9371131313422">For an OpenSearch cluster, add the <span class="parmvalue" id="EN-US_TOPIC_0000001933318574__parmvalue1022363912428"><b>plugins.security.ssl.http.enabled_ciphers</b></span> parameter and set it to <span class="parmvalue" id="EN-US_TOPIC_0000001933318574__parmvalue8224113984213"><b>['TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256', 'TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384']</b></span>.</li></ul>
|
|
<p id="EN-US_TOPIC_0000001933318574__p1648910309166">If the parameter value contains multiple algorithms, enclose the value with a pair of square brackets ([]). If the parameter value is a single algorithm, enclose the value with a pair of single quotation marks(' ').</p>
|
|
</li><li id="EN-US_TOPIC_0000001933318574__li12682102113577">After the change is complete, click <strong id="EN-US_TOPIC_0000001933318574__b156881929103513">Submit</strong>.In the displayed <strong id="EN-US_TOPIC_0000001933318574__b10996105813354">Submit Configuration</strong> dialog box, select the box indicating "I understand that the modification will take effect after the cluster is restarted." and click <strong id="EN-US_TOPIC_0000001933318574__b16767171612362">Yes</strong>.<p id="EN-US_TOPIC_0000001933318574__p0505822115818">If the <strong id="EN-US_TOPIC_0000001933318574__b9193183174014">Status</strong> is <strong id="EN-US_TOPIC_0000001933318574__b273194873611">Succeeded</strong> in the parameter change list, the change has been saved.</p>
|
|
</li><li id="EN-US_TOPIC_0000001933318574__li118883475819">Click <strong id="EN-US_TOPIC_0000001933318574__b13337751132218">Restart</strong> in the upper right corner to restart the cluster, thus making the change take effect.</li></ol>
|
|
</div>
|
|
<div>
|
|
<div class="familylinks">
|
|
<div class="parentlink"><strong>Parent topic:</strong> <a href="css_02_0137.html">Managing CSS Clusters</a></div>
|
|
</div>
|
|
</div>
|
|
|