elasticsearch 配置SSL认证集群

1.在elasticsearch执行目录bin下运行elasticsearch-certgen：./elasticsearch-certgen

　　依次输入生成cert.zip的文件名，节点信息和IP，会在当前目录生成一个zip压缩包

2.在elasticsearch的config目录下新建cert文件夹，将压缩包解压到文件夹会发现ca文件和各个节点密匙文件夹

3.将解压后的cert文件全部scp到其他节点

4.修改elasticsearch配置文件elasticsearch.yml配置文件：不同节点指定自己节点的key和crt

xpack.security.transport.ssl.enabled: true
xpack.ssl.key: /usr/local/elasticsearch/config/cert/YouAi_elk/YouAi_elk.key
xpack.ssl.certificate: /usr/local/elasticsearch/config/cert/YouAi_elk/YouAi_elk.crt
xpack.ssl.certificate_authorities: /usr/local/elasticsearch/config/cert/ca/ca.crt

5.重启elasticsearch各个节点