Renew auto generated http certificates http.p12

Is there any way to renew the http.p12 certificate. I find there is a share Renew auto generated http certificates
However, I only got http_ca.crt. No http_ca.p12. I am running elasticsearch version 8.12.0.
Any recommendation

Did you follow the standard instructions from the documentation here Different CA | Elastic Docs?
That should directly output an p12 file with everything in it you need.

Alternativly you could use the java keytool, that comes with every java, to build that yourself (the following is only an example and may not work exactly):

keytool -storepass '***' -import -alias es-ca -file ***/http_ca.crt -keystore ***/http_ca.p12 -deststoretype PKCS12
1 Like

It works Big Thx.