# Graylog Datanode TLS/SSL Provision Certificate for Grafana Opensearch Connection **URL:** \ **Category:** Graylog Central (peer support)\ **Tags:** docker, architecture\ **Created:** [March 10, 2024, 4:24am UTC](https://community.graylog.org/t/graylog-datanode-tls-ssl-provision-certificate-for-grafana-opensearch-connection/31762 "2024-03-10T04:24:43Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![hanley-development](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/hanley-development/32/16428_2.png) [@hanley-development](https://community.graylog.org/u/hanley-development)\ **Post date:** [March 10, 2024, 4:24am UTC](https://community.graylog.org/t/graylog-datanode-tls-ssl-provision-certificate-for-grafana-opensearch-connection/31762/1 "2024-03-10T04:24:43Z")
**1. Describe your incident:** When using the opensearch docker container previously grafana was able to access the opensearch database using basic credentials. Currently there is no access due to my inability to find a way to provision certificates to the datanode database. **2. Describe your environment:** I’m using Docker and the “official” Graylog Docker Compose file. **3. How can the community help?** Does anyone know of a way to connect grafana with the new datanode as it’s form of security has changed to use certificates. **Main question:** Is there a way to provision a cert to the datanode for third party or self hosted applications? ---
**Author:** ![Joel\_Duffield](https://avatars.discourse-cdn.com/v4/letter/j/71c47a/32.png) [@Joel\_Duffield](https://community.graylog.org/u/Joel_Duffield)\ **Post date:** [March 10, 2024, 11:38am UTC](https://community.graylog.org/t/graylog-datanode-tls-ssl-provision-certificate-for-grafana-opensearch-connection/31762/2 "2024-03-10T11:38:01Z")
Currently no, but it is on the near term roadmap. ---
**Author:** ![hanley-development](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/hanley-development/32/16428_2.png) [@hanley-development](https://community.graylog.org/u/hanley-development)\ **Post date:** [March 12, 2024, 2:10am UTC](https://community.graylog.org/t/graylog-datanode-tls-ssl-provision-certificate-for-grafana-opensearch-connection/31762/3 "2024-03-12T02:10:40Z")
Thank you @Joel_Duffield! ---
**Author:** ![brink](https://avatars.discourse-cdn.com/v4/letter/b/9de053/32.png) [@brink](https://community.graylog.org/u/brink)\ **Post date:** [March 21, 2024, 2:01am UTC](https://community.graylog.org/t/graylog-datanode-tls-ssl-provision-certificate-for-grafana-opensearch-connection/31762/4 "2024-03-21T02:01:59Z")
Looking forward to this. In the meantime, is there a way to export the CA used by graylog so I can authenticate with it? Grafana has the option to authenticate with a CA Cert, and because of the certificate generation and renewal process, I _assume_ that’s what graylog is using to securely connect to graylog datanode instances. In the meantime, I will look around on my own to see if I can find a way to export and authenticate with this info. ---
**Author:** ![Joel\_Duffield](https://avatars.discourse-cdn.com/v4/letter/j/71c47a/32.png) [@Joel\_Duffield](https://community.graylog.org/u/Joel_Duffield)\ **Post date:** [March 21, 2024, 2:23am UTC](https://community.graylog.org/t/graylog-datanode-tls-ssl-provision-certificate-for-grafana-opensearch-connection/31762/5 "2024-03-21T02:23:48Z")
I dont think so, at least i havent heard of anyone doing it successfully. Good news is that 6 is only a month away ---
**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\ **Post date:** [April 4, 2024, 2:24am UTC](https://community.graylog.org/t/graylog-datanode-tls-ssl-provision-certificate-for-grafana-opensearch-connection/31762/6 "2024-04-04T02:24:36Z")
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.