Appears we don’t need to install 
download into tmp
wget http://search.maven.org/remotecontent?filepath=com/floragunn/search-guard-2/5.0.0-alpha4-2a/search-guard-2-5.0.0-alpha4-2a.zip --content-disposition
install both
bin/elasticsearch-plugin install file:///tmp/search-guard-2-5.0.0-alpha4-2a.zip
config ssl per wiki
searchguard.ssl.transport.keystore_filepath: node-0-keystore.jks
searchguard.ssl.transport.keystore_password: changeit
searchguard.ssl.transport.truststore_filepath: truststore.jks
searchguard.ssl.transport.truststore_password: changeit
searchguard.ssl.transport.enforce_hostname_verification: false
results …
elasticsearch | [2016-08-05 16:39:23,677][INFO ][com.floragunn.searchguard.ssl.SearchGuardKeyStore] Open SSL not available (this is not an error, we simply fallback to built-in JDK SSL) because of java.lang.ClassNotFoundException: org.apache.tomcat.jni.SSL
elasticsearch | [2016-08-05 16:39:23,680][INFO ][com.floragunn.searchguard.ssl.SearchGuardKeyStore] Config directory is /usr/share/elasticsearch/config/, from there the key- and truststore files are resolved relatively
elasticsearch | Exception in thread “main” ElasticsearchSecurityException[Error while initializing transport SSL layer: javax.net.ssl.SSLException: failed to initialize the server-side SSL context]; nested: SSLException[failed to initialize the server-side SSL context]; nested: AccessControlException[access denied (“java.security.SecurityPermission” “getProperty.ssl.KeyManagerFactory.algorithm”)];
elasticsearch | Likely root cause: java.security.AccessControlException: access denied (“java.security.SecurityPermission” “getProperty.ssl.KeyManagerFactory.algorithm”)
elasticsearch | at java.security.AccessControlContext.checkPermission(AccessControlContext.java:472)
elasticsearch | at java.security.AccessController.checkPermission(AccessController.java:884)
elasticsearch | at java.lang.SecurityManager.checkPermission(SecurityManager.java:549)
elasticsearch | at java.security.Security.getProperty(Security.java:760)
elasticsearch | at io.netty.handler.ssl.JdkSslContext.buildKeyManagerFactory(JdkSslContext.java:348)
elasticsearch | at io.netty.handler.ssl.JdkSslServerContext.newSSLContext(JdkSslServerContext.java:245)
elasticsearch | at io.netty.handler.ssl.JdkSslServerContext.(JdkSslServerContext.java:226)
elasticsearch | at io.netty.handler.ssl.SslContext.newServerContextInternal(SslContext.java:405)
elasticsearch | at io.netty.handler.ssl.SslContextBuilder.build(SslContextBuilder.java:391)
elasticsearch | at com.floragunn.searchguard.ssl.SearchGuardKeyStore$1.run(SearchGuardKeyStore.java:518)
elasticsearch | at com.floragunn.searchguard.ssl.SearchGuardKeyStore$1.run(SearchGuardKeyStore.java:515)
elasticsearch | at java.security.AccessController.doPrivileged(Native Method)
elasticsearch | at com.floragunn.searchguard.ssl.SearchGuardKeyStore.buildSSLContext(SearchGuardKeyStore.java:515)
elasticsearch | at com.floragunn.searchguard.ssl.SearchGuardKeyStore.initSSLConfig(SearchGuardKeyStore.java:249)
elasticsearch | at com.floragunn.searchguard.ssl.SearchGuardKeyStore.(SearchGuardKeyStore.java:140)
elasticsearch | at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
elasticsearch | at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:62)
elasticsearch | at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45)
elasticsearch | at java.lang.reflect.Constructor.newInstance(Constructor.java:423)
elasticsearch | at <<>>
elasticsearch | at org.elasticsearch.node.Node.(Node.java:287)
elasticsearch | at org.elasticsearch.node.Node.(Node.java:173)
elasticsearch | at org.elasticsearch.bootstrap.Bootstrap$5.(Bootstrap.java:175)
elasticsearch | at org.elasticsearch.bootstrap.Bootstrap.setup(Bootstrap.java:175)
elasticsearch | at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:250)
elasticsearch | at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:96)
elasticsearch | at org.elasticsearch.bootstrap.Elasticsearch.execute(Elasticsearch.java:91)
elasticsearch | at org.elasticsearch.cli.SettingCommand.execute(SettingCommand.java:54)
elasticsearch | at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:91)
elasticsearch | at org.elasticsearch.cli.Command.main(Command.java:53)
elasticsearch | <<>>
elasticsearch exited with code 1
···
On Friday, August 5, 2016 at 9:20:25 AM UTC-7, Brian Walsh wrote:
Latest experiment …
download into tmp
wget http://search.maven.org/remotecontent?filepath=com/floragunn/search-guard-2/5.0.0-alpha4-2a/search-guard-2-5.0.0-alpha4-2a.zip --content-disposition
wget http://search.maven.org/remotecontent?filepath=com/floragunn/search-guard-ssl/5.0.0-alpha4-13a/search-guard-ssl-5.0.0-alpha4-13a.zip --content-disposition
install both
bin/elasticsearch-plugin install file:///tmp/search-guard-2-5.0.0-alpha4-2a.zip
bin/elasticsearch-plugin install file:///tmp/search-guard-ssl-5.0.0-alpha4-13a.zip
start ES
Exception in thread “main” java.lang.IllegalArgumentException: Cannot have additional setting [transport.service.type] in plugin [search-guard-2], already added in plugin [search-guard-ssl]
On Friday, August 5, 2016 at 8:53:47 AM UTC-7, Brian Walsh wrote:
Thanks very much.
That got me further.
Do I still need to install seach-guard-ssl in a similar manner ?
On Thursday, August 4, 2016 at 12:20:39 PM UTC-7, SG wrote:
seems like plugin manager is totally broken in alpha4, so pls try this:
wget http://search.maven.org/remotecontent?filepath=com/floragunn/search-guard-2/5.0.0-alpha4-2a/search-guard-2-5.0.0-alpha4-2a.zip --content-disposition
bin/elasticsearch-plugin install file:///absolute/path/to/search-guard-2-5.0.0-alpha4-2a.zip
Am 04.08.2016 um 18:45 schrieb Brian Walsh br...@bwalsh.com:
curl localhost:9200
{
“name” : “central”,
“cluster_name” : “ccc-es”,
“version” : {
"number" : "5.0.0-alpha4",
"build_hash" : "3f5b994",
"build_date" : "2016-06-27T16:23:46.861Z",
"build_snapshot" : false,
"lucene_version" : "6.1.0"
},
“tagline” : “You Know, for Search”
}
Several attempts:
bin/elasticsearch-plugin install -b com.floragunn/search-guard-2/5.0.0-alpha4-2a
A tool for managing installed elasticsearch plugins
Commands
list - Lists installed elasticsearch plugins
install - Install a plugin
remove - Removes a plugin from elasticsearch
Non-option arguments:
command
Option Description
-h, --help show help
-s, --silent show minimal output
-v, --verbose show verbose output
ERROR: Unknown plugin com.floragunn/search-guard-2/5.0.0-alpha4-2a
→ Downloading https://maven-repository.com/artifact/com.floragunn/search-guard-2/5.0.0-alpha4-2a
ERROR: elasticsearch
directory is missing in the plugin zip
→ Downloading https://oss.sonatype.org/content/repositories/releases/com/floragunn/search-guard-2/5.0.0-alpha4-2a
ERROR: elasticsearch
directory is missing in the plugin zip
–
You received this message because you are subscribed to the Google Groups “Search Guard” group.
To unsubscribe from this group and stop receiving emails from it, send an email to search-guard...@googlegroups.com.
To post to this group, send email to search...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/search-guard/9e628c36-4439-4e8a-8254-54262cc66958%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.