windows中elasticsearch7中添加用户名密码验证

╰半夏微凉° 2024-02-21 09:49 147阅读 0赞

#### 1.找到elsatic的bin目录输入cmd ####

![77846d72376e410f87e1e86a99f973dd.png][]

#### 2.生成ca证书 ####

输入

> elasticsearch-certutil ca

在es7根目录生成ca证书，输入密码时直接回车即可，否则后面会报错

Please enter the desired output file \[elastic-stack-ca.p12\]: \#这里直接回车即可

Enter password for elastic-stack-ca.p12 : \#这里直接回车即可，不要设置密码

![1aa4102af71b4d9abcb973bdb22636d5.png][]

完成后可看到es根目录生成ca证书

#### ![94e9484ee1e944bd9ca7fc02ea45c3f0.png][] 3.生成p12秘钥 ####

使用第一步生成的证书，生成p12秘钥

> elasticsearch-certutil cert --ca elastic-stack-ca.p12

Enter password for CA (elastic-stack-ca.p12) : 直接回车

Please enter the desired output file \[elastic-certificates.p12\]:直接回车

Enter password for elastic-certificates.p12 : \#这里直接回车即可，不要设置密码，否则后面ES无法启动

![1e239fbb659741d6be69c003ce257d80.png][]

![e73705d348854cf0a7f088081da87e0f.png][]

完成后即可在根目录看到p12密钥

![695894f2ff064eb39e07fa021202c376.png][]

附录

若此处报jdk错误，即可改成es7自带的jdk即可

打开**elasticsearch-env.bat**  
增加**使用es里自带的jdk11**

![9d77e960abc9436a8e51dc5c023002a3.png][]

#### 4.修改elasticsearch.yml配置文件 ####

第一步：在config目录下创建certs目录

第二步：拷贝两个p12文件至certs目录

第三步：添加elasticsearch.yml配置如下

xpack.security.enabled: true
     
    xpack.security.transport.ssl.enabled: true
     
    xpack.security.transport.ssl.verification_mode: certificate
     
    xpack.security.transport.ssl.keystore.path: certs/elastic-certificates.p12
     
    xpack.security.transport.ssl.truststore.path: certs/elastic-certificates.p12

#### 5.重启es ####

点击bin/elasticsearch.bat即可启动es

#### 6.设置密码 ####

> **elasticsearch-setup-passwords interactive**

![942b4efaa598470d959663587bcbb74c.png][]

输入确认后，设置密码即可

![7bae1bd4b15e43dcb951b4dea48b2381.png][]

7.根据自己的需要和系统导入的依赖在系统中配置

> spring.elasticsearch.bboss.default.elasticUser=elastic
> 
> spring.elasticsearch.bboss.default.elasticPassword=\*\*\*\*\*\*\*\*\*

[77846d72376e410f87e1e86a99f973dd.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/02/21/b5e4687a3bcc48f98b5ec29431822286.png
[1aa4102af71b4d9abcb973bdb22636d5.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/02/21/03639ccfbd20474f9b40395fd1251856.png
[94e9484ee1e944bd9ca7fc02ea45c3f0.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/02/21/6f7245939e5c40a79e01ed9feffc8142.png
[1e239fbb659741d6be69c003ce257d80.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/02/21/e6876ab811f84065a6ee2e2a8b58e7e9.png
[e73705d348854cf0a7f088081da87e0f.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/02/21/4162dd9b987a4b1b9b120502c4da77bf.png
[695894f2ff064eb39e07fa021202c376.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/02/21/a4bd6459d8bf4864a9b3dae2431bb63e.png
[9d77e960abc9436a8e51dc5c023002a3.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/02/21/869b6956b6d04b63b4563935f4b5e5f9.png
[942b4efaa598470d959663587bcbb74c.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/02/21/a37e944b558d498fb734586435142d3d.png
[7bae1bd4b15e43dcb951b4dea48b2381.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/02/21/adedf866f04e4f5a944dc1fad992776b.png