42 lines
1.1 KiB
Plaintext
42 lines
1.1 KiB
Plaintext
|
|
|||
|
|
# 获取ES 的证书指纹
|
|||
|
|
sudo openssl x509 -fingerprint -sha256 -in /etc/elasticsearch/certs/http_ca.crt -noout
|
|||
|
|
sha256 Fingerprint=80:AF:64:DB:04:3E:12:EB:DA:11:C1:0F:70:04:2A:F9:13:06:A7:05:FD:CB:62:85:81:4A:84:B4:20:C7:34:A5
|
|||
|
|
|
|||
|
|
# kibana web创建的用户
|
|||
|
|
admin
|
|||
|
|
G7ZSKFM4AQwHQpwA
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
# Filebeat
|
|||
|
|
output.elasticsearch:
|
|||
|
|
hosts: ["https://49.51.33.153:9200"]
|
|||
|
|
username: "elastic"
|
|||
|
|
password: "-0NiIBOJGn2CATuPWzNc"
|
|||
|
|
|
|||
|
|
# 用指纹验证（代替证书文件）
|
|||
|
|
ssl.verification_mode: "certificate"
|
|||
|
|
ssl.certificate_authorities: [] # 留空（不校验完整链）
|
|||
|
|
ssl.supported_protocols: [TLSv1.2, TLSv1.3]
|
|||
|
|
|
|||
|
|
# 关键：指定 CA 指纹（必须全大写，无 0x，带冒号）
|
|||
|
|
ssl.ca_trusted_fingerprint: "80AF64DB043E12EBDA11C10F70042AF91306A705FD2CB6285814A84B420C734A5"
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
# python
|
|||
|
|
from elasticsearch import Elasticsearch
|
|||
|
|
|
|||
|
|
es = Elasticsearch(
|
|||
|
|
hosts=["https://49.51.33.153:9200"],
|
|||
|
|
basic_auth=("elastic", "-0NiIBOJGn2CATuPWzNc"),
|
|||
|
|
# 指纹必须去掉冒号，全大写
|
|||
|
|
ssl_assert_fingerprint="80AF64DB043E12EBDA11C10F70042AF91306A705FD2CB6285814A84B420C734A5",
|
|||
|
|
verify_certs=True # 必须为 True
|
|||
|
|
)
|
|||
|
|
|
|||
|
|
print(es.info())
|