http://127.0.0.1:9200/_searchguard/sslinfo?pretty endpoint not working

Search Guard
1

I am following the procedures on SearchGuard SSL 5 quickstart (https://github.com/floragunncom/search-guard-ssl-docs/blob/master/quickstart.md) to set up TLS between nodes. All is well until I tried to access the searchguard endpoint as stated in the documentation: http://127.0.0.1:9200/_searchguard/sslinfo?pretty (I changed 127.0.0.1 to my hostname.)

The error I got is:

  {
"error" : {
"root_cause" : [
{
"type" : "illegal_argument_exception",
"reason" : "No endpoint or operation is available at [sslinfo]"
}
],
"type" : "illegal_argument_exception",
"reason" : "No endpoint or operation is available at [sslinfo]"
},
"status" : 400
}

I do see the plugin registered on /_cat/plugins so searchguard should be installed properly. Any advice?

2

you need to enable ssl for http too and then access https://127.0.0.1:9200/_searchguard/sslinfo?pretty

···

Am 30.12.2016 um 17:41 schrieb Daphne Ng <daphnnee@gmail.com>:

I am following the procedures on SearchGuard SSL 5 quickstart (https://github.com/floragunncom/search-guard-ssl-docs/blob/master/quickstart.md\) to set up TLS between nodes. All is well until I tried to access the searchguard endpoint as stated in the documentation: http://127.0.0.1:9200/_searchguard/sslinfo?pretty (I changed 127.0.0.1 to my hostname.)

The error I got is:
{
  "error" : {
    "root_cause" : [
      {
        "type" : "illegal_argument_exception",
        "reason" : "No endpoint or operation is available at [sslinfo]"
      }
    ],
    "type" : "illegal_argument_exception",
    "reason" : "No endpoint or operation is available at [sslinfo]"
  },
  "status" : 400
}

I do see the plugin registered on /_cat/plugins so searchguard should be installed properly. Any advice?

--
You received this message because you are subscribed to the Google Groups "Search Guard" group.
To unsubscribe from this group and stop receiving emails from it, send an email to search-guard+unsubscribe@googlegroups.com.
To post to this group, send email to search-guard@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/search-guard/15345b41-09dd-4658-811a-4addcd951a01%40googlegroups.com\.
For more options, visit https://groups.google.com/d/optout\.

3

Great! Got it working now. We probably should update the documentation to reflect this.

Another question: what is the purpose for the trust store in configuring https (searchguard.ssl.http.truststore_filepath) if no client authentication is enabled? I understand the trust store for transport security is needed to verify the certificate used by another node in inter-node communication. But,if client authentication is not enabled, do we still need to set up searchguard.ssl.http.truststore_filepath and searchguard.ssl.http.truststore_password?

···

On Friday, December 30, 2016 at 11:55:49 AM UTC-5, Search Guard wrote:

you need to enable ssl for http too and then access https://127.0.0.1:9200/_searchguard/sslinfo?pretty

Am 30.12.2016 um 17:41 schrieb Daphne Ng daph...@gmail.com:

I am following the procedures on SearchGuard SSL 5 quickstart (https://github.com/floragunncom/search-guard-ssl-docs/blob/master/quickstart.md) to set up TLS between nodes. All is well until I tried to access the searchguard endpoint as stated in the documentation: http://127.0.0.1:9200/_searchguard/sslinfo?pretty (I changed 127.0.0.1 to my hostname.)

The error I got is:

{

“error” : {

"root_cause" : [

  {

    "type" : "illegal_argument_exception",

    "reason" : "No endpoint or operation is available at [sslinfo]"

  }

],

"type" : "illegal_argument_exception",

"reason" : "No endpoint or operation is available at [sslinfo]"

},

“status” : 400

}

I do see the plugin registered on /_cat/plugins so searchguard should be installed properly. Any advice?

–
You received this message because you are subscribed to the Google Groups “Search Guard” group.

To unsubscribe from this group and stop receiving emails from it, send an email to search-guard...@googlegroups.com.

To post to this group, send email to search...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/search-guard/15345b41-09dd-4658-811a-4addcd951a01%40googlegroups.com.

For more options, visit https://groups.google.com/d/optout.