In 8.0 (see https://github.com/elastic/elasticsearch/issues/75097 , https://github.com/elastic/elasticsearch/pull/76636) we're filtering out CAs from HTTP Keystores if a non-CA keypair is present. We can detect this scenario in 7.x and issue a deprecation warning so that nodes that have the potential to be impact can be easily detected.
In 8.0 (see #75097 , #76636) we're filtering out CAs from HTTP Keystores if a non-CA keypair is present.
We can detect this scenario in 7.x and issue a deprecation warning so that nodes that have the potential to be impact can be easily detected.