forked from docs/doc-exports
zhengxiu
2125539080
Reviewed-by: Pruthi, Vineet <vineet.pruthi@t-systems.com> Co-authored-by: zhengxiu <zhengxiu@huawei.com> Co-committed-by: zhengxiu <zhengxiu@huawei.com>
17 lines
3.3 KiB
HTML
17 lines
3.3 KiB
HTML
<a name="css_02_0101"></a><a name="css_02_0101"></a>
|
|
|
|
<h1 class="topictitle1">Can I Modify the TLS Algorithm of an Elasticsearch or OpenSearch Cluster in CSS?</h1>
|
|
<div id="body0000001111197590"><p id="css_02_0101__p16762141220530">The TLS algorithm can be modified for Elasticsearch 7.6.2 and later as well as OpenSearch clusters.</p>
|
|
<ol id="css_02_0101__ol188666331330"><li id="css_02_0101__li1776211153117">Log in to the CSS management console.</li><li id="css_02_0101__li619332410521">In the navigation pane, choose <strong id="css_02_0101__b93145062313">Clusters</strong>. The cluster list is displayed.</li><li id="css_02_0101__li5588182716353">Click the name of the target cluster to go to the cluster details page.</li><li id="css_02_0101__li229325643518">Select <strong id="css_02_0101__b18810152819261">Parameter Configurations</strong>, click <strong id="css_02_0101__b117401254104219">Edit</strong>, expand the <strong id="css_02_0101__b015182262716">Customize</strong> parameter, and click <strong id="css_02_0101__b54326013325">Add</strong>.<ul id="css_02_0101__ul7370413194219"><li id="css_02_0101__li18370191315423">For an Elasticsearch cluster, add the <strong id="css_02_0101__b949173413421">opendistro_security.ssl.http.enabled_ciphers</strong> parameter and set it to <strong id="css_02_0101__b184915342426">['TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256', 'TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384']</strong>.</li><li id="css_02_0101__li9371131313422">For an OpenSearch cluster, add the <span class="parmvalue" id="css_02_0101__parmvalue1022363912428"><b>plugins.security.ssl.http.enabled_ciphers</b></span> parameter and set it to <span class="parmvalue" id="css_02_0101__parmvalue8224113984213"><b>['TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256', 'TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384']</b></span>.</li></ul>
|
|
<div class="note" id="css_02_0101__note69860124478"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="css_02_0101__p5986181234717">If the parameter value contains multiple algorithm protocols, enclose the value with a pair of square brackets ([]). If the parameter value is a single algorithm protocol, enclose the value with a pair of single quotation marks(' ').</p>
|
|
</div></div>
|
|
</li><li id="css_02_0101__li12682102113577">After the change is complete, click <strong id="css_02_0101__b156881929103513">Submit</strong>.In the displayed <strong id="css_02_0101__b10996105813354">Submit Configuration</strong> dialog box, select the box indicating "I understand that the modification will take effect after the cluster is restarted." and click <strong id="css_02_0101__b16767171612362">Yes</strong>.<p id="css_02_0101__p0505822115818">If the <strong id="css_02_0101__b9193183174014">Status</strong> is <strong id="css_02_0101__b273194873611">Succeeded</strong> in the parameter change list, the change has been saved.</p>
|
|
</li><li id="css_02_0101__li195461759181418">Return to the cluster list and choose <strong id="css_02_0101__b6494560384">More</strong> > <strong id="css_02_0101__b177921157183810">Restart</strong> in the <strong id="css_02_0101__b77861508397">Operation</strong> column to restart the cluster and make the change take effect.</li></ol>
|
|
</div>
|
|
<div>
|
|
<div class="familylinks">
|
|
<div class="parentlink"><strong>Parent topic:</strong> <a href="css_02_0137.html">Managing CSS Clusters</a></div>
|
|
</div>
|
|
</div>
|
|
|