1.生成证书
bin/elasticsearch-certutil cert -out config/elastic-certificates.p12 -pass ""
生成的证书地址：/usr/local/opt/es7301/config/elastic-certificates.p12
2.拷贝到另外两台服务器
cp es7301/config/elastic-certificates.p12 es7302/config/
cp es7301/config/elastic-certificates.p12 es7303/config/
3.分别修改每台的配置并启动
修改第一台并启动
cd es7301
xpack.security.enabled: true
xpack.security.transport.ssl.enabled: true
xpack.security.transport.ssl.verification_mode: certificate
xpack.security.transport.ssl.keystore.path: /usr/local/opt/es7301/config/elastic-certificates.p12
xpack.security.transport.ssl.truststore.path: /usr/local/opt/es7301/config/elastic-certificates.p12
nohup bin/elasticsearch &
修改第二台并启动
cd es7302
xpack.security.enabled: true
xpack.security.transport.ssl.enabled: true
xpack.security.transport.ssl.verification_mode: certificate
xpack.security.transport.ssl.keystore.path: /usr/local/opt/es7302/config/elastic-certificates.p12
xpack.security.transport.ssl.truststore.path: /usr/local/opt/es7302/config/elastic-certificates.p12
nohup bin/elasticsearch &
修改第三台并启动
cd es7303
xpack.security.enabled: true
xpack.security.transport.ssl.enabled: true
xpack.security.transport.ssl.verification_mode: certificate
xpack.security.transport.ssl.keystore.path: /usr/local/opt/es7303/config/elastic-certificates.p12
xpack.security.transport.ssl.truststore.path: /usr/local/opt/es7303/config/elastic-certificates.p12
nohup bin/elasticsearch &
4.设置密码（这里要注意，设置密码是最后一步，要在配置修改完并启动集群之后设置密码）
使用cd命令切换到elasticsearch目录，然后使用 bin/elasticsearch-setup-passwords auto 命令自动生成好几个默认用户和密码。
如果想手动生成密码，则使用 bin/elasticsearch-setup-passwords interactive 命令。一般默认会生成好几个管理员账户，其中一个叫elastic的用户是超级管理员
bin/elasticsearch-setup-passwords interactive
elastic
elastic
