elasticsearch6.4.2 破解X-Pack插件license

其他 2018-11-14 13:51:13 阅读次数: 0

说明：我的elasticsearch（后文简称ES）版本为6.4.2，安装方式为安装包直接解压安装，安装包地址：https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-6.4.2.tar.gz

1，安装ES，在此不在详述，可参考官方文档：https://www.elastic.co/downloads/elasticsearch，X-Pack插件在这个版本是软件自带的，无需额外安装步骤；

我的安装目录为/usr/local/elasticsearch，查看X-Pack插件：

[es@localhost elasticsearch]$ ll modules/x-pack-core/x-pack-core-6.4.2.jar
-rw-r--r-- 1 es es 1811502 Nov 12 15:50 modules/x-pack-core/x-pack-core-6.4.2.ja

启动ES：

[es@localhost elasticsearch]$ bin/elasticsearch

2，查看当前X-Pack的版本及功能，可以使用curl命令：

[root@node1 elasticsearch]# curl  -XGET 'http://192.168.28.10:9200/_xpack/license'

也可使用kibana的Dev Tools工具，我使用Dev Tools工具查看信息如下：

GET _xpack/license
                {
              "license": {
                "status": "active",
                "uid": "46f0b3bc-76c5-414b-b89f-1ad81481de1c",
                "type": "basic",　　　　　　　　　　　　　　　　　　　　　　#基本类型License
                "issue_date": "2018-10-22T19:40:31.602Z",
                "issue_date_in_millis": 1540237231602,
                "max_nodes": 1000,
                "issued_to": "my-es",
                "issuer": "elasticsearch",
                "start_date_in_millis": -1
              }

3，将X-Pack的jar包复制出来，便于解压和修改操作：

[root@node1 home]# cp /usr/local/elasticsearch/modules/x-pack-core/x-pack-core-6.4.2.jar /home/test/
[root@node1 home]# ll test/
total 1772
-rw-r--r-- 1 root root 1811502 Nov 14 11:25 x-pack-core-6.4.2.jar

4，解压X-Pack的jar包，并把原.jar包删除：

[root@node1 test]# jar -xvf x-pack-core-6.4.2.jar
[root@node1 test]# ll
total 1900
-rw-r--r-- 1 root root     994 Sep 26 13:37 logstash-index-template.json
drwxr-xr-x 2 root root    4096 Nov 12 15:50 META-INF
-rw-r--r-- 1 root root    1247 Sep 26 13:37 monitoring-alerts.json
-rw-r--r-- 1 root root   12826 Sep 26 13:37 monitoring-beats.json
-rw-r--r-- 1 root root   27426 Sep 26 13:37 monitoring-es.json
-rw-r--r-- 1 root root    5899 Sep 26 13:37 monitoring-kibana.json
-rw-r--r-- 1 root root   11787 Sep 26 13:37 monitoring-logstash.json
drwxr-xr-x 3 root root    4096 Sep 26 13:37 org
-rw-r--r-- 1 root root     294 Sep 26 13:37 public.key
-rw-r--r-- 1 root root     556 Sep 26 13:37 rollup-dynamic-template.json
-rw-r--r-- 1 root root    1797 Sep 26 13:37 security_audit_log.json
-rw-r--r-- 1 root root    5129 Sep 26 13:37 security-index-template.json
-rw-r--r-- 1 root root     893 Sep 26 13:37 triggered-watches.json
-rw-r--r-- 1 root root    1391 Sep 26 13:37 watches.json
-rw-r--r-- 1 root root   19869 Sep 26 13:37 watch-history.json

5，修改解压出来的如下两个文件：

[root@node1 test]# ll org/elasticsearch/license/LicenseVerifier.class 
-rw-r--r-- 1 root root 410 Nov 12 15:46 org/elasticsearch/license/LicenseVerifier.class
[root@node1 test]# ll org/elasticsearch/xpack/core/XPackBuild.class 
-rw-r--r-- 1 root root 2635 Nov 12 15:36 org/elasticsearch/xpack/core/XPackBuild.class

首先将两个文件使用luyten反编译工具解析出源码，该工具可以网上下载：

然后将解析后的源码保存为.java格式的文件；

使用文本编辑工具编辑LicenseVerifier.java文件，内容如下：

package org.elasticsearch.license;

import java.nio.*;
import org.elasticsearch.common.bytes.*;
import java.util.*;
import java.security.*;
import org.elasticsearch.common.xcontent.*;
import org.apache.lucene.util.*;
import org.elasticsearch.core.internal.io.*;
import java.io.*;

public class LicenseVerifier
{
    public static boolean verifyLicense(final License license, final byte[] encryptedPublicKeyData) {
        return true;
    }

    public static boolean verifyLicense(final License license) {
        return true;
    }
}

同样的方法，将XPackBuild.class保存为java格式，并修改为如下：

package org.elasticsearch.xpack.core;

import org.elasticsearch.common.io.*;
import java.net.*;
import org.elasticsearch.common.*;
import java.nio.file.*;
import java.io.*;
import java.util.jar.*;

public class XPackBuild
{
    public static final XPackBuild CURRENT;
    private String shortHash;
    private String date;

    @SuppressForbidden(reason = "looks up path of xpack.jar directly")
    static Path getElasticsearchCodebase() {
        final URL url = XPackBuild.class.getProtectionDomain().getCodeSource().getLocation();
        try {
            return PathUtils.get(url.toURI());
        }
        catch (URISyntaxException bogus) {
            throw new RuntimeException(bogus);
        }
    }

    XPackBuild(final String shortHash, final String date) {
        this.shortHash = shortHash;
        this.date = date;
    }

    public String shortHash() {
        return this.shortHash;
    }

    public String date() {
        return this.date;
    }

    static {
        final Path path = getElasticsearchCodebase();
        String shortHash = null;
        String date = null;
        Label_0157: {
            shortHash = "Unknown";
            date = "Unknown";
        }
        CURRENT = new XPackBuild(shortHash, date);
    }
}

6，将两个.java文件重新编译为.class文件，命令如下，具体安装路径可能会不相同，大家根据自己具体路径填写：

[root@node1 test]#javac -cp "/usr/local/elasticsearch/lib/elasticsearch-6.4.2.jar:/usr/local/elasticsearch/lib/lucene-core-7.4.0.jar:/usr/local/elasticsearch/modules/x-pack-core/x-pack-core-6.4.2.jar:/usr/local/elasticsearch/lib/elasticsearch-core-6.4.2.jar" LicenseVerifier.java
[root@node1 test]#javac -cp "/usr/local/elasticsearch/lib/elasticsearch-6.4.2.jar:/usr/local/elasticsearch/lib/lucene-core-7.4.0.jar:/usr/local/elasticsearch/modules/x-pack-core/x-pack-core-6.4.2.jar:/usr/local/elasticsearch/lib/elasticsearch-core-6.4.2.jar" XPackBuild.java

7，将重新编译的这两个.class文件复制到解压x-pack-core-6.4.2.jar文件的目录，覆盖掉之前未修改的文件，重新打包该.jar包；

[root@node1 test]# jar -cvf x-pack-core-6.4.2.jar  .

8，从官网申请新的license，申请地址：https://license.elastic.co/registration

 我申请的license，并修改license的版本和期限，type改为platinum白金版，expiry_date_in_millis期限设为2855980923000：

[es@localhost elasticsearch]$ ll li-qq-b5dccd00-b476-4b69-8763-cf22fc136822-v5.json 
-rw-r--r-- 1 es es 1191 Nov  7 15:20 li-qq-b5dccd00-b476-4b69-8763-cf22fc136822-v5.json
[es@localhost elasticsearch]$ cat li-qq-b5dccd00-b476-4b69-8763-cf22fc136822-v5.json 
{"license":{"uid":"b5dccd00-b476-4b69-8763-cf22fc136822","type":"platinum","issue_date_in_millis":1541462400000,"expiry_date_in_millis":2855980923000,"max_nodes":100,"issued_to":"li qq (dahe)","issuer":"Web Form","signature":"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","start_date_in_millis":1541462400000}}

9，新license上传至ES，方法两种：

一是通过API接口上传：

[root@node1 elasticsearch]# curl  -XPUT 'http://192.168.28.10:9200/_xpack/license' -H "Content-Type: application/json" -d @li-qq-b5dccd00-b476-4b69-8763-cf22fc136822-v5.json
{"acknowledged":true,"license_status":"valid"}[root@node1 elasticsearch]#

第二种通过Dev Tools工具上传：

POST _xpack/license
{
  "license": {
    "uid": "b5dccd00-b476-4b69-8763-cf22fc136822",
    "type": "platinum",
    "issue_date_in_millis": 1541462400000,
    "expiry_date_in_millis": 2855980923000,
    "max_nodes": 100,
    "issued_to": "li qq (dahe)",
    "issuer": "Web Form",
    "signature": "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",
    "start_date_in_millis": 1541462400000
  }
}

10，重启ES，验证license，查看步骤2的验证方法：

[root@node1 elasticsearch]# curl  -XGET 'http://192.168.28.10:9200/_xpack/license' 
{
  "license" : {
    "status" : "active",
    "uid" : "b5dccd00-b476-4b69-8763-cf22fc136822",
    "type" : "platinum",
    "issue_date" : "2018-11-06T00:00:00.000Z",
    "issue_date_in_millis" : 1541462400000,
    "expiry_date" : "2060-07-02T08:02:03.000Z",
    "expiry_date_in_millis" : 2855980923000,
    "max_nodes" : 100,
    "issued_to" : "li qq (dahe)",
    "issuer" : "Web Form",
    "start_date_in_millis" : 1541462400000
  }
}

注意：如果部署了ES集群，每个ES节点都应该更新license。

猜你喜欢

转载自www.cnblogs.com/qilvfei/p/9956932.html
今日推荐
周排行
Access的四舍五入取整
8.23 前端学习过程
入门学习过程方向与漏洞复现总结：
操作分布式文件之八：如何批量并行读写远程文件和事务补偿处理
应邀出个教程 （搭建tensorflow跑网络环境）
Kubernetes之Pod控制器应用进阶
14-[mysql内置功能]--
HDU6212 区间dp 好题
VS2015生成代码图
验证手机号的工具类
每日归档
更多
2024-10-21(0)
2024-10-20(0)
2024-10-19(0)
2024-10-18(0)
2024-10-17(0)
2024-10-16(0)
2024-10-15(0)
2024-10-14(0)
2024-10-13(0)
2024-10-12(0)

代码天地 © 2018 codetd.com

境外服务器   最新电视剧2022