Certificate Error When Launching OpenSearch Dashboards Visualization Tiles in the Chrome Browser

The certificate error is displayed because the subject alternate name (SAN) attribute is missing in the SSL certificate of OpenSearch and OpenSearch Dashboards. You should add the SAN attribute when setting up the keystore and private key and when you create the certificate signing request.

Example of SAN attribute: -ext SAN=dns:<domain_name>. Note that <domain_name> should be the exact host name.

The SAN attribute should be included in the script as shown in the following examples:

OpenSearch SSL Certificate

Set up keystore and private key:

keytool -genkey -alias node_alias -keystore OS_HOME/config/keystore/mykeystore.jks -keyalg RSA -keysize 2048 -validity 90 -ext SAN=dns:<domain_name>

Create Certificate Signing request (CSR):

keytool -certreq -alias node_alias -keystore OS_HOME/config/keystore/mykeystore.jks -file /home/certs/mycsr.csr -keyalg rsa -ext SAN=dns:<domain_name>

OpenSearch Dashboards SSL Certificate

Set up keystore and private key:

keytool -genkey -alias alias1 -keystore OSD_HOME/bin/mykeystore.jks -keyalg RSA -keysize 2048 -validity 712 -ext SAN=dns:<domain_name>

Create Certificate Signing request:

keytool -certreq -alias alias1 -keystore OSD_HOME/bin/mykeystore.jks -file D:\ca\mycsr.csr -keyalg rsa -ext SAN=dns:<domain_name>