Issue
- The certificate used for x-pack configuration is about to expire and you need to replace it.
- Also you need to know what happens if it’s not replaced.
Environment
- Elasticsearch x-pack security
- DXP 7.2+
Resolution
-
When using x-pack security, the Elasticsearch certificate is utilized to encrypt the communications between nodes. If the certificate expires and is not renewed, the encryption will be affected. In this case, Liferay will still be able to connect to Elasticsearch, but the x-pack module will not be available.
-
To update the certificate on each Elasticsearch node, a rolling restart can be considered. You can find instructions on how to update node security certificates in the Elasticsearch documentation.
-
On the Liferay side, you will need to replace the certificate used for the connection in System Configuration > Search > X-Pack security. After making this change, restart Liferay. If you have multiple nodes, it is recommended to schedule a maintenance window for this update.
Additional Information