Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add explainer on transport trust config to docs #66898

Open
tvernum opened this issue Dec 31, 2020 · 2 comments
Open

Add explainer on transport trust config to docs #66898

tvernum opened this issue Dec 31, 2020 · 2 comments
Labels
>docs General docs changes >enhancement :Security/TLS SSL/TLS, Certificates Team:Security Meta label for security team

Comments

@tvernum
Copy link
Contributor

tvernum commented Dec 31, 2020

We don't have a clear explainer about why we mandate transport TLS (xpack.security.transport.ssl.enabled), why it's important, and how you should think about it.

We have guides on how to set it up, and if people follow those guides then they will have an appropriate configuration, but we don't explain why that's the correct setup and why other configurations might not be.

I wrote up a first pass on the forums: https://discuss.elastic.co/t/need-help-in-configuring-tls-ssl-for-elk-with-3rd-party-certificates-comodo/259745/2

I think we need to come up with a more polished version of that explanation and slot it into the security setup documentation (probably as a separate page for "advanced users" or something like that - I don't think we want to push that level of detail onto everyone that tries to configure ES for the first time).

@tvernum tvernum added >enhancement >docs General docs changes :Security/TLS SSL/TLS, Certificates labels Dec 31, 2020
@elasticmachine elasticmachine added Team:Docs Meta label for docs team Team:Security Meta label for security team labels Dec 31, 2020
@elasticmachine
Copy link
Collaborator

Pinging @elastic/es-docs (Team:Docs)

@elasticmachine
Copy link
Collaborator

Pinging @elastic/es-security (Team:Security)

@lockewritesdocs lockewritesdocs self-assigned this Oct 11, 2021
@lockewritesdocs lockewritesdocs removed their assignment Apr 27, 2022
@lockewritesdocs lockewritesdocs removed the Team:Docs Meta label for docs team label Apr 27, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
>docs General docs changes >enhancement :Security/TLS SSL/TLS, Certificates Team:Security Meta label for security team
Projects
None yet
Development

No branches or pull requests

3 participants