es:6.3.1
kibana:6.3.1
首先需要在java中引入search-guard的6.3.1的包岗仑，包括ssl的包
<dependency>
? ? <groupId>com.floragunn</groupId>
? ? <artifactId>search-guard-ssl</artifactId>
? ? <version>6.3.1-25.4</version>
</dependency>
<dependency>
? ? <groupId>com.floragunn</groupId>
? ? <artifactId>search-guard-6</artifactId>
? ? <version>6.3.1-23.0</version>
? ? <scope>provided</scope>
</dependency>
2.將之前權(quán)限需要的jks文件拍谐，和秘鑰要加入到項(xiàng)目中來(lái)，在elasticsearch.yaml中配置ssl相關(guān)的信息
searchguard.ssl.transport.keystore_filepath: node-0-keystore.jks
searchguard.ssl.transport.keystore_password: changeit
searchguard.ssl.transport.truststore_filepath: truststore.jks
searchguard.ssl.transport.truststore_password: changeit
searchguard.ssl.transport.enforce_hostname_verification: false
searchguard.ssl.transport.resolve_hostname: false
searchguard.authcz.admin_dn:
- CN=sgadmin,OU=client,O=client,L=Test, C=DE
searchguard.nodes_dn:
- 'CN=node-*.example.com,OU=SSL,O=Test,L=Test,C=DE'
在ElasticSearchConnection類中中代碼中需要如下指定：
Settings settings = Settings.builder()
? ? ? ? ? ? ? ? .put("client.transport.ignore_cluster_name", true)
? ? ? ? ? ? ? ? .put("path.home", ".")
//? ? ? ? ? ? ? ? .put("path.conf", "E:\\gitlab\\DpGodFarm\\DpGodFarm2\\DpGodFarm\\src\\main\\resources")
? ? ? ? ? ? ? ? .put("cluster.name", "testes-cluster")
? ? ? ? ? ? ? ? .put("searchguard.ssl.transport.enabled", true)
? ? ? ? ? ? ? ? .put("searchguard.ssl.transport.keystore_filepath", "sgadmin-keystore.jks")
? ? ? ? ? ? ? ? .put("searchguard.ssl.transport.truststore_filepath", "truststore.jks")
? ? ? ? ? ? ? ? .put("searchguard.ssl.http.keystore_password", "changeit")
? ? ? ? ? ? ? ? .put("searchguard.ssl.http.truststore_password", "changeit")
? ? ? ? ? ? ? ? .put("searchguard.ssl.transport.keystore_password", "changeit")
? ? ? ? ? ? ? ? .put("searchguard.ssl.transport.truststore_password", "changeit")
? ? ? ? ? ? ? ? .put("searchguard.ssl.transport.enforce_hostname_verification", false)
? ? ? ? ? ? ? ? .build();
? ? ? ? try {
（一定要加入SearchGuardPlugin.class责掏，否則啟動(dòng)一直報(bào)錯(cuò)找不到searchguard.ssl.transport.keystore_filepath）
TransportClient transportClient = new PreBuiltTransportClient(settings,SearchGuardPlugin.class);
我覺(jué)得是要設(shè)置用戶的柜砾，萬(wàn)一開(kāi)發(fā)的不小心把庫(kù)刪了怎么辦
.put("request.headers.sg_impersonate_as", "kibana5")
