Connect to Elasticsearch with python using SSL

user_3815432 0
Viewed 7220

I am trying to connect to Elasticsearch from python with SSL and using the basic code for that:

from elasticsearch import Elasticsearch
from ssl import create_default_context

context = create_default_context(cafile="path/to/cafile.pem")
es = Elasticsearch("https://elasticsearch.url:port", ssl_context=context, http_auth=('elastic','yourpassword'))

from: https://github.com/elastic/elasticsearch-py

I need to supply cafile.pem, and http_auth parameters. On the server where my python is running SSL connection is already set up, so I can do basic queries to Elasticsearch. It was set up using keys in ~/.ssh directory: id_rsa, id_rsa.pub. So, now I am wondering whether I should supply id_rsa.pub key in place of path/to/cafile.pem, and if yes, then I would need to change permissions of ~/.ssh folder which seems like not a good idea from security perspective. Then, I am not sure that .pub is the same as .pem, do I need to convert it first? Then, also should http_auth just be omitted since I do not use any password when I do simple queries in terminal? How should I go about this issue (setting up access in python to ES with SSL) according to best practices - thats the question.

Update

I tried both .pub and generated from it pem:

https://serverfault.com/questions/706336/how-to-get-a-pem-file-from-ssh-key-pair

But both failed to create_default_context with an unknown error in context.load_verify_locations(cafile, capath, cadata).

elasticsearch ssl python
2 Answers

The answer for my particular case turned out to be very simple. I found it here:

https://elasticsearch-py.readthedocs.io/en/master/

es = Elasticsearch(['https://user:secret@localhost:443'])

Just specified https url inside and it worked out right away.

user_38154320

Elasticsearch Docker image & Python2.7. Have Copied ssl certificate file to root of the project. Made sure it's readable, ownership and group ownership will allow read access. Put pass and login to constants.

es = Elasticsearch(
    hosts=[
            "https://localhost:9200"
    ],
    http_auth=(USR_LOGIN, USR_PASS),
    use_ssl=True,
    verify_certs=True,
    ca_certs="./http_ca.crt",
)
user_68131760
Related