# "No certificates" error **URL:** \ **Category:** Search Guard\ **Created:** [July 10, 2017, 2:12pm UTC](https://forum.search-guard.com/t/no-certificates-error/513 "2017-07-10T14:12:12Z")\ **Posts on this page:** 9\ **Page:** 1
**Author:** ![\_Mic](https://avatars.discourse-cdn.com/v4/letter/_/ba8739/32.png) [@\_Mic](https://forum.search-guard.com/u/_Mic)\ **Post date:** [July 10, 2017, 2:12pm UTC](https://forum.search-guard.com/t/no-certificates-error/513/1 "2017-07-10T14:12:12Z")
Good afternoon folks! I’m trying the REST management API, but I’ve an error that I can’t understand. This is the command I gave: curl --cert /root/search-guard-certificates/client-certificates/CN=sgadmin-crtfull.pem --key /root/search-guard-certificates/client-certificates/CN=sgadmin.key.pem admin:admin@localhost:9200/\_searchguard/api/user/admin `` but the answer is: No certificates `` This could appear like I didn’t passed any certs (and in facts, If i don’t pass any certs, the answer is the same). But now: I pass it valid certificates, and I can’t find all over the web an explanation of this error. Can you help me please? Thank you, -Michele ---
**Author:** ![searchguard\_google\_group](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/searchguard_google_group/32/462_2.png) [@searchguard\_google\_group](https://forum.search-guard.com/u/searchguard_google_group)\ **Post date:** [July 10, 2017, 5:49pm UTC](https://forum.search-guard.com/t/no-certificates-error/513/2 "2017-07-10T17:49:06Z")
seems to forgot to prepend https:// curl --cert /root/search-guard-certificates/client-certificates/CN\=sgadmin-crtfull.pem --key /root/search-guard-certificates/client-certificates/CN\=sgadmin.key.pem [https://admin:admin@localhost:9200/\_searchguard/api/user/admin](https://admin:admin@localhost:9200/_searchguard/api/user/admin) > **···** > > > Am 10.07.2017 um 16:12 schrieb –Mic \: > > > > Good afternoon folks! > > > > I'm trying the REST management API, but I've an error that I can't understand. This is the command I gave: > > > > curl --cert /root/search-guard-certificates/client-certificates/CN\=sgadmin-crtfull.pem --key /root/search-guard-certificates/client-certificates/CN\=sgadmin.key.pem admin:admin@localhost:9200/\_searchguard/api/user/admin > > > > but the answer is: > > > > No certificates > > > > This could appear like I didn't passed any certs (and in facts, If i don't pass any certs, the answer is the same). But now: I pass it valid certificates, and I can't find all over the web an explanation of this error. > > Can you help me please? > > Thank you, > > > > -Michele > > > > -- > > You received this message because you are subscribed to the Google Groups "Search Guard" group. > > To unsubscribe from this group and stop receiving emails from it, send an email to search-guard+unsubscribe@googlegroups.com. > > To post to this group, send email to search-guard@googlegroups.com. > > To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/fef2f722-45ec-4f08-8d3b-0c274d65bed5%40googlegroups.com\](https://groups.google.com/d/msgid/search-guard/fef2f722-45ec-4f08-8d3b-0c274d65bed5%40googlegroups.com%5C). > > For more options, visit [https://groups.google.com/d/optout\](https://groups.google.com/d/optout%5C). ---
**Author:** ![\_Mic](https://avatars.discourse-cdn.com/v4/letter/_/ba8739/32.png) [@\_Mic](https://forum.search-guard.com/u/_Mic)\ **Post date:** [July 11, 2017, 9:28am UTC](https://forum.search-guard.com/t/no-certificates-error/513/3 "2017-07-11T09:28:03Z")
It worked, and I no longer received that error. Now BTW, I receive “curl: (35) Encountered end of file”. I’m looking on google for suggestions… > **···** > > Il giorno lunedì 10 luglio 2017 19:48:49 UTC+2, Search Guard ha scritto: > > > seems to forgot to prepend https:// > > > > curl --cert /root/search-guard-certificates/client-certificates/CN=sgadmin-crtfull.pem --key /root/search-guard-certificates/client-certificates/CN=sgadmin.key.pem [https://admin:admin@localhost:9200/\_searchguard/api/user/admin](https://admin:admin@localhost:9200/_searchguard/api/user/admin) > > > > > Am 10.07.2017 um 16:12 schrieb –Mic [miche...@gmail.com](mailto:miche...@gmail.com): > > > > > Good afternoon folks! > > > > > I’m trying the REST management API, but I’ve an error that I can’t understand. This is the command I gave: > > > > > curl --cert /root/search-guard-certificates/client-certificates/CN=sgadmin-crtfull.pem --key /root/search-guard-certificates/client-certificates/CN=sgadmin.key.pem admin:admin@localhost:9200/\_searchguard/api/user/admin > > > > > but the answer is: > > > > > No certificates > > > > > This could appear like I didn’t passed any certs (and in facts, If i don’t pass any certs, the answer is the same). But now: I pass it valid certificates, and I can’t find all over the web an explanation of this error. > > > > > Can you help me please? > > > Thank you, > > > > > -Michele > > > > > – > > > You received this message because you are subscribed to the Google Groups “Search Guard” group. > > > > > To unsubscribe from this group and stop receiving emails from it, send an email to [search-guard...@googlegroups.com](mailto:search-guard...@googlegroups.com). > > > > > To post to this group, send email to [search...@googlegroups.com](mailto:search...@googlegroups.com). > > > > > To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/fef2f722-45ec-4f08-8d3b-0c274d65bed5%40googlegroups.com](https://groups.google.com/d/msgid/search-guard/fef2f722-45ec-4f08-8d3b-0c274d65bed5%40googlegroups.com). > > > > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![\_Mic](https://avatars.discourse-cdn.com/v4/letter/_/ba8739/32.png) [@\_Mic](https://forum.search-guard.com/u/_Mic)\ **Post date:** [July 11, 2017, 12:23pm UTC](https://forum.search-guard.com/t/no-certificates-error/513/4 "2017-07-11T12:23:33Z")
\*\* UPDATE \*\* With curl -vv option: curl -vv --cert /root/search-guard-certificates/client-certificates/CN=sgadmin.crtfull.pem --key /root/search-guard-certificates/client-certificates/CN=sgadmin.key.pem [https://admin:admin@localhost:9200/\_searchguard/api/user/admin](https://admin:admin@localhost:9200/_searchguard/api/user/admin) - About to connect() to localhost port 9200 (#0) - Trying 127.0.0.1… - Connected to localhost (127.0.0.1) port 9200 (#0) - Initializing NSS with certpath: sql:/etc/pki/nssdb - CAfile: /etc/pki/tls/certs/ca-bundle.crt CApath: none - NSS error -5938 (PR\_END\_OF\_FILE\_ERROR) - Encountered end of file - Closing connection 0 curl: (35) Encountered end of file `` I also checked Elasticsearch logs, which show this error whenever I send the curl request: [2017-07-11 12:38:36,013][WARN][http.netty] [node-1] Caught exception while handling client http traffic, closing connection [id: 0x7460fc66, /127.0.0.1:37954 =\> /127.0.0.1:9200] java.lang.IllegalArgumentException: invalid version format: ﾫZﾵ~ﾢ{}VￋDﾋ￙ￇUￋDU6￀,￀ at org.jboss.netty.handler.codec.http.HttpVersion.(HttpVersion.java:94) at org.jboss.netty.handler.codec.http.HttpVersion.valueOf(HttpVersion.java:62) at org.jboss.netty.handler.codec.http.HttpRequestDecoder.createMessage(HttpRequestDecoder.java:75) at org.jboss.netty.handler.codec.http.HttpMessageDecoder.decode(HttpMessageDecoder.java:191) at org.jboss.netty.handler.codec.http.HttpMessageDecoder.decode(HttpMessageDecoder.java:102) at org.jboss.netty.handler.codec.replay.ReplayingDecoder.callDecode(ReplayingDecoder.java:500) at org.jboss.netty.handler.codec.replay.ReplayingDecoder.messageReceived(ReplayingDecoder.java:435) at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:70) at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564) at org.jboss.netty.channel.DefaultChannelPipeline$DefaultChannelHandlerContext.sendUpstream(DefaultChannelPipeline.java:791) at org.elasticsearch.common.netty.OpenChannelsHandler.handleUpstream(OpenChannelsHandler.java:75) at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564) at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:559) at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:268) at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:255) at org.jboss.netty.channel.socket.nio.NioWorker.read(NioWorker.java:88) at org.jboss.netty.channel.socket.nio.AbstractNioWorker.process(AbstractNioWorker.java:108) at org.jboss.netty.channel.socket.nio.AbstractNioSelector.run(AbstractNioSelector.java:337) at org.jboss.netty.channel.socket.nio.AbstractNioWorker.run(AbstractNioWorker.java:89) at org.jboss.netty.channel.socket.nio.NioWorker.run(NioWorker.java:178) at org.jboss.netty.util.ThreadRenamingRunnable.run(ThreadRenamingRunnable.java:108) at org.jboss.netty.util.internal.DeadLockProofWorker$1.run(DeadLockProofWorker.java:42) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617) at java.lang.Thread.run(Thread.java:745) [2017-07-11 12:38:36,014][WARN][http.netty] [node-1] Caught exception while handling client http traffic, closing connection [id: 0x7460fc66, /127.0.0.1:37954 :\> /127.0.0.1:9200] java.lang.IllegalArgumentException: invalid version format: ﾫZﾵ~ﾢ{}VￋDﾋ￙ￇUￋDU6￀,￀ at org.jboss.netty.handler.codec.http.HttpVersion.(HttpVersion.java:94) at org.jboss.netty.handler.codec.http.HttpVersion.valueOf(HttpVersion.java:62) at org.jboss.netty.handler.codec.http.HttpRequestDecoder.createMessage(HttpRequestDecoder.java:75) at org.jboss.netty.handler.codec.http.HttpMessageDecoder.decode(HttpMessageDecoder.java:191) at org.jboss.netty.handler.codec.http.HttpMessageDecoder.decode(HttpMessageDecoder.java:102) at org.jboss.netty.handler.codec.replay.ReplayingDecoder.callDecode(ReplayingDecoder.java:500) at org.jboss.netty.handler.codec.replay.ReplayingDecoder.cleanup(ReplayingDecoder.java:554) at org.jboss.netty.handler.codec.frame.FrameDecoder.channelDisconnected(FrameDecoder.java:365) at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:102) at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564) at org.jboss.netty.channel.DefaultChannelPipeline$DefaultChannelHandlerContext.sendUpstream(DefaultChannelPipeline.java:791) at org.elasticsearch.common.netty.OpenChannelsHandler.handleUpstream(OpenChannelsHandler.java:75) at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564) at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:559) at org.jboss.netty.channel.Channels.fireChannelDisconnected(Channels.java:396) at org.jboss.netty.channel.socket.nio.AbstractNioWorker.close(AbstractNioWorker.java:360) at org.jboss.netty.channel.socket.nio.NioServerSocketPipelineSink.handleAcceptedSocket(NioServerSocketPipelineSink.java:81) at org.jboss.netty.channel.socket.nio.NioServerSocketPipelineSink.eventSunk(NioServerSocketPipelineSink.java:36) at org.jboss.netty.channel.DefaultChannelPipeline$DefaultChannelHandlerContext.sendDownstream(DefaultChannelPipeline.java:779) at org.jboss.netty.handler.codec.oneone.OneToOneEncoder.handleDownstream(OneToOneEncoder.java:54) at org.jboss.netty.channel.DefaultChannelPipeline.sendDownstream(DefaultChannelPipeline.java:591) at org.jboss.netty.channel.DefaultChannelPipeline$DefaultChannelHandlerContext.sendDownstream(DefaultChannelPipeline.java:784) at org.jboss.netty.channel.SimpleChannelHandler.closeRequested(SimpleChannelHandler.java:334) at org.jboss.netty.channel.SimpleChannelHandler.handleDownstream(SimpleChannelHandler.java:260) at org.elasticsearch.http.netty.pipelining.HttpPipeliningHandler.handleDownstream(HttpPipeliningHandler.java:105) at org.jboss.netty.channel.DefaultChannelPipeline.sendDownstream(DefaultChannelPipeline.java:591) at org.jboss.netty.channel.DefaultChannelPipeline.sendDownstream(DefaultChannelPipeline.java:582) at org.jboss.netty.channel.Channels.close(Channels.java:812) at org.jboss.netty.channel.AbstractChannel.close(AbstractChannel.java:205) at org.elasticsearch.http.netty.NettyHttpServerTransport.exceptionCaught(NettyHttpServerTransport.java:467) at org.elasticsearch.http.netty.HttpRequestHandler.exceptionCaught(HttpRequestHandler.java:67) at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:112) at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564) at org.jboss.netty.channel.DefaultChannelPipeline$DefaultChannelHandlerContext.sendUpstream(DefaultChannelPipeline.java:791) at org.jboss.netty.channel.SimpleChannelHandler.exceptionCaught(SimpleChannelHandler.java:156) at org.jboss.netty.channel.SimpleChannelHandler.handleUpstream(SimpleChannelHandler.java:130) at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564) at org.jboss.netty.channel.DefaultChannelPipeline$DefaultChannelHandlerContext.sendUpstream(DefaultChannelPipeline.java:791) at org.jboss.netty.channel.SimpleChannelUpstreamHandler.exceptionCaught(SimpleChannelUpstreamHandler.java:153) at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:112) at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564) at org.jboss.netty.channel.DefaultChannelPipeline$DefaultChannelHandlerContext.sendUpstream(DefaultChannelPipeline.java:791) at org.jboss.netty.channel.SimpleChannelUpstreamHandler.exceptionCaught(SimpleChannelUpstreamHandler.java:153) at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:112) at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564) at org.jboss.netty.channel.DefaultChannelPipeline$DefaultChannelHandlerContext.sendUpstream(DefaultChannelPipeline.java:791) at org.jboss.netty.handler.codec.frame.FrameDecoder.exceptionCaught(FrameDecoder.java:377) at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:112) at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564) at org.jboss.netty.channel.DefaultChannelPipeline$DefaultChannelHandlerContext.sendUpstream(DefaultChannelPipeline.java:791) at org.elasticsearch.common.netty.OpenChannelsHandler.handleUpstream(OpenChannelsHandler.java:75) at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564) at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:559) at org.jboss.netty.channel.Channels.fireExceptionCaught(Channels.java:525) at org.jboss.netty.channel.AbstractChannelSink.exceptionCaught(AbstractChannelSink.java:48) at org.jboss.netty.channel.DefaultChannelPipeline.notifyHandlerException(DefaultChannelPipeline.java:658) at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:566) at org.jboss.netty.channel.DefaultChannelPipeline$DefaultChannelHandlerContext.sendUpstream(DefaultChannelPipeline.java:791) at org.elasticsearch.common.netty.OpenChannelsHandler.handleUpstream(OpenChannelsHandler.java:75) at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564) at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:559) at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:268) at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:255) at org.jboss.netty.channel.socket.nio.NioWorker.read(NioWorker.java:88) at org.jboss.netty.channel.socket.nio.AbstractNioWorker.process(AbstractNioWorker.java:108) at org.jboss.netty.channel.socket.nio.AbstractNioSelector.run(AbstractNioSelector.java:337) at org.jboss.netty.channel.socket.nio.AbstractNioWorker.run(AbstractNioWorker.java:89) at org.jboss.netty.channel.socket.nio.NioWorker.run(NioWorker.java:178) at org.jboss.netty.util.ThreadRenamingRunnable.run(ThreadRenamingRunnable.java:108) at org.jboss.netty.util.internal.DeadLockProofWorker$1.run(DeadLockProofWorker.java:42) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617) at java.lang.Thread.run(Thread.java:745) `` I don’t know how to go further… any help? ---
**Author:** ![searchguard\_google\_group](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/searchguard_google_group/32/462_2.png) [@searchguard\_google\_group](https://forum.search-guard.com/u/searchguard_google_group)\ **Post date:** [July 11, 2017, 2:27pm UTC](https://forum.search-guard.com/t/no-certificates-error/513/5 "2017-07-11T14:27:50Z")
pls post your elasticsearch.yml > **···** > > > Am 11.07.2017 um 14:23 schrieb –Mic \: > > > > \*\* UPDATE \*\* > > > > With curl -vv option: > > > > curl -vv --cert /root/search-guard-certificates/client-certificates/CN\=sgadmin.crtfull.pem --key /root/search-guard-certificates/client-certificates/CN\=sgadmin.key.pem [https://admin:admin@localhost:9200/\_searchguard/api/user/admin](https://admin:admin@localhost:9200/_searchguard/api/user/admin) > > \* About to connect() to localhost port 9200 (#0) > > \* Trying 127.0.0.1... > > \* Connected to localhost (127.0.0.1) port 9200 (#0) > > \* Initializing NSS with certpath: sql:/etc/pki/nssdb > > \* CAfile: /etc/pki/tls/certs/ca-bundle.crt > >   CApath: none > > \* NSS error -5938 (PR\_END\_OF\_FILE\_ERROR) > > \* Encountered end of file > > \* Closing connection 0 > > curl: (35) Encountered end of file > > > > I also checked Elasticsearch logs, which show this error whenever I send the curl request: > > > > [2017-07-11 12:38:36,013][WARN][http.netty] [node-1] Caught exception while handling client http traffic, closing connection [id: 0x7460fc66, /127.0.0.1:37954 =\> /127.0.0.1:9200] > > java.lang.IllegalArgumentException: invalid version format: ﾫZﾵ~ﾢ{}VￋDﾋ￙ￇUￋDU6￀,￀ > >         at org.jboss.netty.handler.codec.http.HttpVersion.\(HttpVersion.java:94) > >         at org.jboss.netty.handler.codec.http.HttpVersion.valueOf(HttpVersion.java:62) > >         at org.jboss.netty.handler.codec.http.HttpRequestDecoder.createMessage(HttpRequestDecoder.java:75) > >         at org.jboss.netty.handler.codec.http.HttpMessageDecoder.decode(HttpMessageDecoder.java:191) > >         at org.jboss.netty.handler.codec.http.HttpMessageDecoder.decode(HttpMessageDecoder.java:102) > >         at org.jboss.netty.handler.codec.replay.ReplayingDecoder.callDecode(ReplayingDecoder.java:500) > >         at org.jboss.netty.handler.codec.replay.ReplayingDecoder.messageReceived(ReplayingDecoder.java:435) > >         at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:70) > >         at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564) > >         at org.jboss.netty.channel.DefaultChannelPipeline$DefaultChannelHandlerContext.sendUpstream(DefaultChannelPipeline.java:791) > >         at org.elasticsearch.common.netty.OpenChannelsHandler.handleUpstream(OpenChannelsHandler.java:75) > >         at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564) > >         at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:559) > >         at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:268) > >         at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:255) > >         at org.jboss.netty.channel.socket.nio.NioWorker.read(NioWorker.java:88) > >         at org.jboss.netty.channel.socket.nio.AbstractNioWorker.process(AbstractNioWorker.java:108) > >         at org.jboss.netty.channel.socket.nio.AbstractNioSelector.run(AbstractNioSelector.java:337) > >         at org.jboss.netty.channel.socket.nio.AbstractNioWorker.run(AbstractNioWorker.java:89) > >         at org.jboss.netty.channel.socket.nio.NioWorker.run(NioWorker.java:178) > >         at org.jboss.netty.util.ThreadRenamingRunnable.run(ThreadRenamingRunnable.java:108) > >         at org.jboss.netty.util.internal.DeadLockProofWorker$1.run(DeadLockProofWorker.java:42) > >         at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142) > >         at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617) > >         at java.lang.Thread.run(Thread.java:745) > > [2017-07-11 12:38:36,014][WARN][http.netty] [node-1] Caught exception while handling client http traffic, closing connection [id: 0x7460fc66, /127.0.0.1:37954 :\> /127.0.0.1:9200] > > java.lang.IllegalArgumentException: invalid version format: ﾫZﾵ~ﾢ{}VￋDﾋ￙ￇUￋDU6￀,￀ > >         at org.jboss.netty.handler.codec.http.HttpVersion.\(HttpVersion.java:94) > >         at org.jboss.netty.handler.codec.http.HttpVersion.valueOf(HttpVersion.java:62) > >         at org.jboss.netty.handler.codec.http.HttpRequestDecoder.createMessage(HttpRequestDecoder.java:75) > >         at org.jboss.netty.handler.codec.http.HttpMessageDecoder.decode(HttpMessageDecoder.java:191) > >         at org.jboss.netty.handler.codec.http.HttpMessageDecoder.decode(HttpMessageDecoder.java:102) > >         at org.jboss.netty.handler.codec.replay.ReplayingDecoder.callDecode(ReplayingDecoder.java:500) > >         at org.jboss.netty.handler.codec.replay.ReplayingDecoder.cleanup(ReplayingDecoder.java:554) > >         at org.jboss.netty.handler.codec.frame.FrameDecoder.channelDisconnected(FrameDecoder.java:365) > >         at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:102) > >         at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564) > >         at org.jboss.netty.channel.DefaultChannelPipeline$DefaultChannelHandlerContext.sendUpstream(DefaultChannelPipeline.java:791) > >         at org.elasticsearch.common.netty.OpenChannelsHandler.handleUpstream(OpenChannelsHandler.java:75) > >         at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564) > >         at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:559) > >         at org.jboss.netty.channel.Channels.fireChannelDisconnected(Channels.java:396) > >         at org.jboss.netty.channel.socket.nio.AbstractNioWorker.close(AbstractNioWorker.java:360) > >         at org.jboss.netty.channel.socket.nio.NioServerSocketPipelineSink.handleAcceptedSocket(NioServerSocketPipelineSink.java:81) > >         at org.jboss.netty.channel.socket.nio.NioServerSocketPipelineSink.eventSunk(NioServerSocketPipelineSink.java:36) > >         at org.jboss.netty.channel.DefaultChannelPipeline$DefaultChannelHandlerContext.sendDownstream(DefaultChannelPipeline.java:779) > >         at org.jboss.netty.handler.codec.oneone.OneToOneEncoder.handleDownstream(OneToOneEncoder.java:54) > >         at org.jboss.netty.channel.DefaultChannelPipeline.sendDownstream(DefaultChannelPipeline.java:591) > >         at org.jboss.netty.channel.DefaultChannelPipeline$DefaultChannelHandlerContext.sendDownstream(DefaultChannelPipeline.java:784) > >         at org.jboss.netty.channel.SimpleChannelHandler.closeRequested(SimpleChannelHandler.java:334) > >         at org.jboss.netty.channel.SimpleChannelHandler.handleDownstream(SimpleChannelHandler.java:260) > >         at org.elasticsearch.http.netty.pipelining.HttpPipeliningHandler.handleDownstream(HttpPipeliningHandler.java:105) > >         at org.jboss.netty.channel.DefaultChannelPipeline.sendDownstream(DefaultChannelPipeline.java:591) > >         at org.jboss.netty.channel.DefaultChannelPipeline.sendDownstream(DefaultChannelPipeline.java:582) > >         at org.jboss.netty.channel.Channels.close(Channels.java:812) > >         at org.jboss.netty.channel.AbstractChannel.close(AbstractChannel.java:205) > >         at org.elasticsearch.http.netty.NettyHttpServerTransport.exceptionCaught(NettyHttpServerTransport.java:467) > >         at org.elasticsearch.http.netty.HttpRequestHandler.exceptionCaught(HttpRequestHandler.java:67) > >         at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:112) > >         at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564) > >         at org.jboss.netty.channel.DefaultChannelPipeline$DefaultChannelHandlerContext.sendUpstream(DefaultChannelPipeline.java:791) > >         at org.jboss.netty.channel.SimpleChannelHandler.exceptionCaught(SimpleChannelHandler.java:156) > >         at org.jboss.netty.channel.SimpleChannelHandler.handleUpstream(SimpleChannelHandler.java:130) > >         at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564) > >         at org.jboss.netty.channel.DefaultChannelPipeline$DefaultChannelHandlerContext.sendUpstream(DefaultChannelPipeline.java:791) > >         at org.jboss.netty.channel.SimpleChannelUpstreamHandler.exceptionCaught(SimpleChannelUpstreamHandler.java:153) > >         at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:112) > >         at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564) > >         at org.jboss.netty.channel.DefaultChannelPipeline$DefaultChannelHandlerContext.sendUpstream(DefaultChannelPipeline.java:791) > >         at org.jboss.netty.channel.SimpleChannelUpstreamHandler.exceptionCaught(SimpleChannelUpstreamHandler.java:153) > >         at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:112) > >         at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564) > >         at org.jboss.netty.channel.DefaultChannelPipeline$DefaultChannelHandlerContext.sendUpstream(DefaultChannelPipeline.java:791) > >         at org.jboss.netty.handler.codec.frame.FrameDecoder.exceptionCaught(FrameDecoder.java:377) > >         at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:112) > >         at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564) > >         at org.jboss.netty.channel.DefaultChannelPipeline$DefaultChannelHandlerContext.sendUpstream(DefaultChannelPipeline.java:791) > >         at org.elasticsearch.common.netty.OpenChannelsHandler.handleUpstream(OpenChannelsHandler.java:75) > >         at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564) > >         at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:559) > >         at org.jboss.netty.channel.Channels.fireExceptionCaught(Channels.java:525) > >         at org.jboss.netty.channel.AbstractChannelSink.exceptionCaught(AbstractChannelSink.java:48) > >         at org.jboss.netty.channel.DefaultChannelPipeline.notifyHandlerException(DefaultChannelPipeline.java:658) > >         at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:566) > >         at org.jboss.netty.channel.DefaultChannelPipeline$DefaultChannelHandlerContext.sendUpstream(DefaultChannelPipeline.java:791) > >         at org.elasticsearch.common.netty.OpenChannelsHandler.handleUpstream(OpenChannelsHandler.java:75) > >         at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564) > >         at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:559) > >         at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:268) > >         at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:255) > >         at org.jboss.netty.channel.socket.nio.NioWorker.read(NioWorker.java:88) > >         at org.jboss.netty.channel.socket.nio.AbstractNioWorker.process(AbstractNioWorker.java:108) > >         at org.jboss.netty.channel.socket.nio.AbstractNioSelector.run(AbstractNioSelector.java:337) > >         at org.jboss.netty.channel.socket.nio.AbstractNioWorker.run(AbstractNioWorker.java:89) > >         at org.jboss.netty.channel.socket.nio.NioWorker.run(NioWorker.java:178) > >         at org.jboss.netty.util.ThreadRenamingRunnable.run(ThreadRenamingRunnable.java:108) > >         at org.jboss.netty.util.internal.DeadLockProofWorker$1.run(DeadLockProofWorker.java:42) > >         at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142) > >         at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617) > >         at java.lang.Thread.run(Thread.java:745) > > > > I don't know how to go further.. any help? > > > > -- > > You received this message because you are subscribed to the Google Groups "Search Guard" group. > > To unsubscribe from this group and stop receiving emails from it, send an email to search-guard+unsubscribe@googlegroups.com. > > To post to this group, send email to search-guard@googlegroups.com. > > To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/8e23992d-849e-4e45-aa20-0936600a0ca9%40googlegroups.com\](https://groups.google.com/d/msgid/search-guard/8e23992d-849e-4e45-aa20-0936600a0ca9%40googlegroups.com%5C). > > For more options, visit [https://groups.google.com/d/optout\](https://groups.google.com/d/optout%5C). ---
**Author:** ![\_Mic](https://avatars.discourse-cdn.com/v4/letter/_/ba8739/32.png) [@\_Mic](https://forum.search-guard.com/u/_Mic)\ **Post date:** [July 11, 2017, 3:12pm UTC](https://forum.search-guard.com/t/no-certificates-error/513/6 "2017-07-11T15:12:33Z")
Of course: node.name: node-1 http.port: 9200 searchguard.ssl.transport.keystore\_filepath: keystore.jks searchguard.ssl.transport.keystore\_password: xxxxxxxxxxxx searchguard.ssl.transport.truststore\_filepath: truststore.jks searchguard.ssl.transport.truststore\_password: xxxxxxxxxxxx searchguard.ssl.transport.enforce\_hostname\_verification: false searchguard.authcz.admin\_dn: - CN=sgadmin `` > **···** > > Il giorno martedì 11 luglio 2017 16:27:28 UTC+2, Search Guard ha scritto: > > > pls post your elasticsearch.yml > > > > > Am 11.07.2017 um 14:23 schrieb –Mic [miche...@gmail.com](mailto:miche...@gmail.com): > > > > > \*\* UPDATE \*\* > > > > > With curl -vv option: > > > > > curl -vv --cert /root/search-guard-certificates/client-certificates/CN=sgadmin.crtfull.pem --key /root/search-guard-certificates/client-certificates/CN=sgadmin.key.pem [https://admin:admin@localhost:9200/\_searchguard/api/user/admin](https://admin:admin@localhost:9200/_searchguard/api/user/admin) > > > > > - About to connect() to localhost port 9200 (#0) > > > > > - Trying 127.0.0.1… > > > > > - Connected to localhost (127.0.0.1) port 9200 (#0) > > > > > - Initializing NSS with certpath: sql:/etc/pki/nssdb > > > > > - CAfile: /etc/pki/tls/certs/ca-bundle.crt > > > > > CApath: none > > > > > - NSS error -5938 (PR\_END\_OF\_FILE\_ERROR) > > > > > - Encountered end of file > > > > > - Closing connection 0 > > > > > curl: (35) Encountered end of file > > > > > I also checked Elasticsearch logs, which show this error whenever I send the curl request: > > > > > [2017-07-11 12:38:36,013][WARN][http.netty] [node-1] Caught exception while handling client http traffic, closing connection [id: 0x7460fc66, /[127.0.0.1:37954](http://127.0.0.1:37954) =\> /[127.0.0.1:9200](http://127.0.0.1:9200)] > > > > > java.lang.IllegalArgumentException: invalid version format: ﾫZﾵ~ﾢ{}VￋDﾋ￙ￇUￋDU6￀,￀ > > > > > ``` > > > at org.jboss.netty.handler.codec.http.HttpVersion.(HttpVersion.java:94) > > > > > > ``` > > > > > ``` > > > at org.jboss.netty.handler.codec.http.HttpVersion.valueOf(HttpVersion.java:62) > > > > > > ``` > > > > > ``` > > > at org.jboss.netty.handler.codec.http.HttpRequestDecoder.createMessage(HttpRequestDecoder.java:75) > > > > > > ``` > > > > > ``` > > > at org.jboss.netty.handler.codec.http.HttpMessageDecoder.decode(HttpMessageDecoder.java:191) > > > > > > ``` > > > > > ``` > > > at org.jboss.netty.handler.codec.http.HttpMessageDecoder.decode(HttpMessageDecoder.java:102) > > > > > > ``` > > > > > ``` > > > at org.jboss.netty.handler.codec.replay.ReplayingDecoder.callDecode(ReplayingDecoder.java:500) > > > > > > ``` > > > > > ``` > > > at org.jboss.netty.handler.codec.replay.ReplayingDecoder.messageReceived(ReplayingDecoder.java:435) > > > > > > ``` > > > > > ``` > > > at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:70) > > > > > > ``` > > > > > ``` > > > at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564) > > > > > > ``` > > > > > ``` > > > at org.jboss.netty.channel.DefaultChannelPipeline$DefaultChannelHandlerContext.sendUpstream(DefaultChannelPipeline.java:791) > > > > > > ``` > > > > > ``` > > > at org.elasticsearch.common.netty.OpenChannelsHandler.handleUpstream(OpenChannelsHandler.java:75) > > > > > > ``` > > > > > ``` > > > at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564) > > > > > > ``` > > > > > ``` > > > at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:559) > > > > > > ``` > > > > > ``` > > > at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:268) > > > > > > ``` > > > > > ``` > > > at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:255) > > > > > > ``` > > > > > ``` > > > at org.jboss.netty.channel.socket.nio.NioWorker.read(NioWorker.java:88) > > > > > > ``` > > > > > ``` > > > at org.jboss.netty.channel.socket.nio.AbstractNioWorker.process(AbstractNioWorker.java:108) > > > > > > ``` > > > > > ``` > > > at org.jboss.netty.channel.socket.nio.AbstractNioSelector.run(AbstractNioSelector.java:337) > > > > > > ``` > > > > > ``` > > > at org.jboss.netty.channel.socket.nio.AbstractNioWorker.run(AbstractNioWorker.java:89) > > > > > > ``` > > > > > ``` > > > at org.jboss.netty.channel.socket.nio.NioWorker.run(NioWorker.java:178) > > > > > > ``` > > > > > ``` > > > at org.jboss.netty.util.ThreadRenamingRunnable.run(ThreadRenamingRunnable.java:108) > > > > > > ``` > > > > > ``` > > > at org.jboss.netty.util.internal.DeadLockProofWorker$1.run(DeadLockProofWorker.java:42) > > > > > > ``` > > > > > ``` > > > at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142) > > > > > > ``` > > > > > ``` > > > at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617) > > > > > > ``` > > > > > ``` > > > at java.lang.Thread.run(Thread.java:745) > > > > > > ``` > > > > > [2017-07-11 12:38:36,014][WARN][http.netty] [node-1] Caught exception while handling client http traffic, closing connection [id: 0x7460fc66, /[127.0.0.1:37954](http://127.0.0.1:37954) :\> /[127.0.0.1:9200](http://127.0.0.1:9200)] > > > > > java.lang.IllegalArgumentException: invalid version format: ﾫZﾵ~ﾢ{}VￋDﾋ￙ￇUￋDU6￀,￀ > > > > > ``` > > > at org.jboss.netty.handler.codec.http.HttpVersion.(HttpVersion.java:94) > > > > > > ``` > > > > > ``` > > > at org.jboss.netty.handler.codec.http.HttpVersion.valueOf(HttpVersion.java:62) > > > > > > ``` > > > > > ``` > > > at org.jboss.netty.handler.codec.http.HttpRequestDecoder.createMessage(HttpRequestDecoder.java:75) > > > > > > ``` > > > > > ``` > > > at org.jboss.netty.handler.codec.http.HttpMessageDecoder.decode(HttpMessageDecoder.java:191) > > > > > > ``` > > > > > ``` > > > at org.jboss.netty.handler.codec.http.HttpMessageDecoder.decode(HttpMessageDecoder.java:102) > > > > > > ``` > > > > > ``` > > > at org.jboss.netty.handler.codec.replay.ReplayingDecoder.callDecode(ReplayingDecoder.java:500) > > > > > > ``` > > > > > ``` > > > at org.jboss.netty.handler.codec.replay.ReplayingDecoder.cleanup(ReplayingDecoder.java:554) > > > > > > ``` > > > > > ``` > > > at org.jboss.netty.handler.codec.frame.FrameDecoder.channelDisconnected(FrameDecoder.java:365) > > > > > > ``` > > > > > ``` > > > at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:102) > > > > > > ``` > > > > > ``` > > > at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564) > > > > > > ``` > > > > > ``` > > > at org.jboss.netty.channel.DefaultChannelPipeline$DefaultChannelHandlerContext.sendUpstream(DefaultChannelPipeline.java:791) > > > > > > ``` > > > > > ``` > > > at org.elasticsearch.common.netty.OpenChannelsHandler.handleUpstream(OpenChannelsHandler.java:75) > > > > > > ``` > > > > > ``` > > > at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564) > > > > > > ``` > > > > > ``` > > > at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:559) > > > > > > ``` > > > > > ``` > > > at org.jboss.netty.channel.Channels.fireChannelDisconnected(Channels.java:396) > > > > > > ``` > > > > > ``` > > > at org.jboss.netty.channel.socket.nio.AbstractNioWorker.close(AbstractNioWorker.java:360) > > > > > > ``` > > > > > ``` > > > at org.jboss.netty.channel.socket.nio.NioServerSocketPipelineSink.handleAcceptedSocket(NioServerSocketPipelineSink.java:81) > > > > > > ``` > > > > > ``` > > > at org.jboss.netty.channel.socket.nio.NioServerSocketPipelineSink.eventSunk(NioServerSocketPipelineSink.java:36) > > > > > > ``` > > > > > ``` > > > at org.jboss.netty.channel.DefaultChannelPipeline$DefaultChannelHandlerContext.sendDownstream(DefaultChannelPipeline.java:779) > > > > > > ``` > > > > > ``` > > > at org.jboss.netty.handler.codec.oneone.OneToOneEncoder.handleDownstream(OneToOneEncoder.java:54) > > > > > > ``` > > > > > ``` > > > at org.jboss.netty.channel.DefaultChannelPipeline.sendDownstream(DefaultChannelPipeline.java:591) > > > > > > ``` > > > > > ``` > > > at org.jboss.netty.channel.DefaultChannelPipeline$DefaultChannelHandlerContext.sendDownstream(DefaultChannelPipeline.java:784) > > > > > > ``` > > > > > ``` > > > at org.jboss.netty.channel.SimpleChannelHandler.closeRequested(SimpleChannelHandler.java:334) > > > > > > ``` > > > > > ``` > > > at org.jboss.netty.channel.SimpleChannelHandler.handleDownstream(SimpleChannelHandler.java:260) > > > > > > ``` > > > > > ``` > > > at org.elasticsearch.http.netty.pipelining.HttpPipeliningHandler.handleDownstream(HttpPipeliningHandler.java:105) > > > > > > ``` > > > > > ``` > > > at org.jboss.netty.channel.DefaultChannelPipeline.sendDownstream(DefaultChannelPipeline.java:591) > > > > > > ``` > > > > > ``` > > > at org.jboss.netty.channel.DefaultChannelPipeline.sendDownstream(DefaultChannelPipeline.java:582) > > > > > > ``` > > > > > ``` > > > at org.jboss.netty.channel.Channels.close(Channels.java:812) > > > > > > ``` > > > > > ``` > > > at org.jboss.netty.channel.AbstractChannel.close(AbstractChannel.java:205) > > > > > > ``` > > > > > ``` > > > at org.elasticsearch.http.netty.NettyHttpServerTransport.exceptionCaught(NettyHttpServerTransport.java:467) > > > > > > ``` > > > > > ``` > > > at org.elasticsearch.http.netty.HttpRequestHandler.exceptionCaught(HttpRequestHandler.java:67) > > > > > > ``` > > > > > ``` > > > at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:112) > > > > > > ``` > > > > > ``` > > > at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564) > > > > > > ``` > > > > > ``` > > > at org.jboss.netty.channel.DefaultChannelPipeline$DefaultChannelHandlerContext.sendUpstream(DefaultChannelPipeline.java:791) > > > > > > ``` > > > > > ``` > > > at org.jboss.netty.channel.SimpleChannelHandler.exceptionCaught(SimpleChannelHandler.java:156) > > > > > > ``` > > > > > ``` > > > at org.jboss.netty.channel.SimpleChannelHandler.handleUpstream(SimpleChannelHandler.java:130) > > > > > > ``` > > > > > ``` > > > at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564) > > > > > > ``` > > > > > ``` > > > at org.jboss.netty.channel.DefaultChannelPipeline$DefaultChannelHandlerContext.sendUpstream(DefaultChannelPipeline.java:791) > > > > > > ``` > > > > > ``` > > > at org.jboss.netty.channel.SimpleChannelUpstreamHandler.exceptionCaught(SimpleChannelUpstreamHandler.java:153) > > > > > > ``` > > > > > ``` > > > at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:112) > > > > > > ``` > > > > > ``` > > > at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564) > > > > > > ``` > > > > > ``` > > > at org.jboss.netty.channel.DefaultChannelPipeline$DefaultChannelHandlerContext.sendUpstream(DefaultChannelPipeline.java:791) > > > > > > ``` > > > > > ``` > > > at org.jboss.netty.channel.SimpleChannelUpstreamHandler.exceptionCaught(SimpleChannelUpstreamHandler.java:153) > > > > > > ``` > > > > > ``` > > > at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:112) > > > > > > ``` > > > > > ``` > > > at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564) > > > > > > ``` > > > > > ``` > > > at org.jboss.netty.channel.DefaultChannelPipeline$DefaultChannelHandlerContext.sendUpstream(DefaultChannelPipeline.java:791) > > > > > > ``` > > > > > ``` > > > at org.jboss.netty.handler.codec.frame.FrameDecoder. > > > > > > ``` ---
**Author:** ![searchguard\_google\_group](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/searchguard_google_group/32/462_2.png) [@searchguard\_google\_group](https://forum.search-guard.com/u/searchguard_google_group)\ **Post date:** [July 11, 2017, 4:11pm UTC](https://forum.search-guard.com/t/no-certificates-error/513/7 "2017-07-11T16:11:26Z")
seems you miss the HTTPS config: searchguard.ssl.http.enabled: true searchguard.ssl.http.keystore\_filepath: keystore\_https\_node1.jks searchguard.ssl.http.truststore\_filepath: truststore\_https.jks ... Pls read [https://github.com/floragunncom/search-guard-docs/blob/master/tls\_configuration.md#rest-layer-tls](https://github.com/floragunncom/search-guard-docs/blob/master/tls_configuration.md#rest-layer-tls) > **···** > > > Am 11.07.2017 um 17:12 schrieb –Mic \: > > > > Of course: > > > > node.name: node-1 > > http.port: 9200 > > searchguard.ssl.transport.keystore\_filepath: keystore.jks > > searchguard.ssl.transport.keystore\_password: xxxxxxxxxxxx > > searchguard.ssl.transport.truststore\_filepath: truststore.jks > > searchguard.ssl.transport.truststore\_password: xxxxxxxxxxxx > > searchguard.ssl.transport.enforce\_hostname\_verification: false > > searchguard.authcz.admin\_dn: > >   - CN=sgadmin > > > > Il giorno martedì 11 luglio 2017 16:27:28 UTC+2, Search Guard ha scritto: > > pls post your elasticsearch.yml > > > > \> Am 11.07.2017 um 14:23 schrieb –Mic \: > > \> > > \> \*\* UPDATE \*\* > > \> > > \> With curl -vv option: > > \> > > \> curl -vv --cert /root/search-guard-certificates/client-certificates/CN\=sgadmin.crtfull.pem --key /root/search-guard-certificates/client-certificates/CN\=sgadmin.key.pem [https://admin:admin@localhost:9200/\_searchguard/api/user/admin](https://admin:admin@localhost:9200/_searchguard/api/user/admin) > > \> \* About to connect() to localhost port 9200 (#0) > > \> \* Trying 127.0.0.1... > > \> \* Connected to localhost (127.0.0.1) port 9200 (#0) > > \> \* Initializing NSS with certpath: sql:/etc/pki/nssdb > > \> \* CAfile: /etc/pki/tls/certs/ca-bundle.crt > > \> CApath: none > > \> \* NSS error -5938 (PR\_END\_OF\_FILE\_ERROR) > > \> \* Encountered end of file > > \> \* Closing connection 0 > > \> curl: (35) Encountered end of file > > \> > > \> > > \> > > \> I also checked Elasticsearch logs, which show this error whenever I send the curl request: > > \> > > \> [2017-07-11 12:38:36,013][WARN][http.netty] [node-1] Caught exception while handling client http traffic, closing connection [id: 0x7460fc66, /127.0.0.1:37954 =\> /127.0.0.1:9200] > > \> java.lang.IllegalArgumentException: invalid version format: ﾫZﾵ~ﾢ{}VￋDﾋ￙ￇUￋDU6￀,￀ > > \> at org.jboss.netty.handler.codec.http.HttpVersion.\(HttpVersion.java:94) > > \> at org.jboss.netty.handler.codec.http.HttpVersion.valueOf(HttpVersion.java:62) > > \> at org.jboss.netty.handler.codec.http.HttpRequestDecoder.createMessage(HttpRequestDecoder.java:75) > > \> at org.jboss.netty.handler.codec.http.HttpMessageDecoder.decode(HttpMessageDecoder.java:191) > > \> at org.jboss.netty.handler.codec.http.HttpMessageDecoder.decode(HttpMessageDecoder.java:102) > > \> at org.jboss.netty.handler.codec.replay.ReplayingDecoder.callDecode(ReplayingDecoder.java:500) > > \> at org.jboss.netty.handler.codec.replay.ReplayingDecoder.messageReceived(ReplayingDecoder.java:435) > > \> at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:70) > > \> at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564) > > \> at org.jboss.netty.channel.DefaultChannelPipeline$DefaultChannelHandlerContext.sendUpstream(DefaultChannelPipeline.java:791) > > \> at org.elasticsearch.common.netty.OpenChannelsHandler.handleUpstream(OpenChannelsHandler.java:75) > > \> at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564) > > \> at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:559) > > \> at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:268) > > \> at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:255) > > \> at org.jboss.netty.channel.socket.nio.NioWorker.read(NioWorker.java:88) > > \> at org.jboss.netty.channel.socket.nio.AbstractNioWorker.process(AbstractNioWorker.java:108) > > \> at org.jboss.netty.channel.socket.nio.AbstractNioSelector.run(AbstractNioSelector.java:337) > > \> at org.jboss.netty.channel.socket.nio.AbstractNioWorker.run(AbstractNioWorker.java:89) > > \> at org.jboss.netty.channel.socket.nio.NioWorker.run(NioWorker.java:178) > > \> at org.jboss.netty.util.ThreadRenamingRunnable.run(ThreadRenamingRunnable.java:108) > > \> at org.jboss.netty.util.internal.DeadLockProofWorker$1.run(DeadLockProofWorker.java:42) > > \> at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142) > > \> at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617) > > \> at java.lang.Thread.run(Thread.java:745) > > \> [2017-07-11 12:38:36,014][WARN][http.netty] [node-1] Caught exception while handling client http traffic, closing connection [id: 0x7460fc66, /127.0.0.1:37954 :\> /127.0.0.1:9200] > > \> java.lang.IllegalArgumentException: invalid version format: ﾫZﾵ~ﾢ{}VￋDﾋ￙ￇUￋDU6￀,￀ > > \> at org.jboss.netty.handler.codec.http.HttpVersion.\(HttpVersion.java:94) > > \> at org.jboss.netty.handler.codec.http.HttpVersion.valueOf(HttpVersion.java:62) > > \> at org.jboss.netty.handler.codec.http.HttpRequestDecoder.createMessage(HttpRequestDecoder.java:75) > > \> at org.jboss.netty.handler.codec.http.HttpMessageDecoder.decode(HttpMessageDecoder.java:191) > > \> at org.jboss.netty.handler.codec.http.HttpMessageDecoder.decode(HttpMessageDecoder.java:102) > > \> at org.jboss.netty.handler.codec.replay.ReplayingDecoder.callDecode(ReplayingDecoder.java:500) > > \> at org.jboss.netty.handler.codec.replay.ReplayingDecoder.cleanup(ReplayingDecoder.java:554) > > \> at org.jboss.netty.handler.codec.frame.FrameDecoder.channelDisconnected(FrameDecoder.java:365) > > \> at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:102) > > \> at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564) > > \> at org.jboss.netty.channel.DefaultChannelPipeline$DefaultChannelHandlerContext.sendUpstream(DefaultChannelPipeline.java:791) > > \> at org.elasticsearch.common.netty.OpenChannelsHandler.handleUpstream(OpenChannelsHandler.java:75) > > \> at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564) > > \> at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:559) > > \> at org.jboss.netty.channel.Channels.fireChannelDisconnected(Channels.java:396) > > \> at org.jboss.netty.channel.socket.nio.AbstractNioWorker.close(AbstractNioWorker.java:360) > > \> at org.jboss.netty.channel.socket.nio.NioServerSocketPipelineSink.handleAcceptedSocket(NioServerSocketPipelineSink.java:81) > > \> at org.jboss.netty.channel.socket.nio.NioServerSocketPipelineSink.eventSunk(NioServerSocketPipelineSink.java:36) > > \> at org.jboss.netty.channel.DefaultChannelPipeline$DefaultChannelHandlerContext.sendDownstream(DefaultChannelPipeline.java:779) > > \> at org.jboss.netty.handler.codec.oneone.OneToOneEncoder.handleDownstream(OneToOneEncoder.java:54) > > \> at org.jboss.netty.channel.DefaultChannelPipeline.sendDownstream(DefaultChannelPipeline.java:591) > > \> at org.jboss.netty.channel.DefaultChannelPipeline$DefaultChannelHandlerContext.sendDownstream(DefaultChannelPipeline.java:784) > > \> at org.jboss.netty.channel.SimpleChannelHandler.closeRequested(SimpleChannelHandler.java:334) > > \> at org.jboss.netty.channel.SimpleChannelHandler.handleDownstream(SimpleChannelHandler.java:260) > > \> at org.elasticsearch.http.netty.pipelining.HttpPipeliningHandler.handleDownstream(HttpPipeliningHandler.java:105) > > \> at org.jboss.netty.channel.DefaultChannelPipeline.sendDownstream(DefaultChannelPipeline.java:591) > > \> at org.jboss.netty.channel.DefaultChannelPipeline.sendDownstream(DefaultChannelPipeline.java:582) > > \> at org.jboss.netty.channel.Channels.close(Channels.java:812) > > \> at org.jboss.netty.channel.AbstractChannel.close(AbstractChannel.java:205) > > \> at org.elasticsearch.http.netty.NettyHttpServerTransport.exceptionCaught(NettyHttpServerTransport.java:467) > > \> at org.elasticsearch.http.netty.HttpRequestHandler.exceptionCaught(HttpRequestHandler.java:67) > > \> at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:112) > > \> at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564) > > \> at org.jboss.netty.channel.DefaultChannelPipeline$DefaultChannelHandlerContext.sendUpstream(DefaultChannelPipeline.java:791) > > \> at org.jboss.netty.channel.SimpleChannelHandler.exceptionCaught(SimpleChannelHandler.java:156) > > \> at org.jboss.netty.channel.SimpleChannelHandler.handleUpstream(SimpleChannelHandler.java:130) > > \> at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564) > > \> at org.jboss.netty.channel.DefaultChannelPipeline$DefaultChannelHandlerContext.sendUpstream(DefaultChannelPipeline.java:791) > > \> at org.jboss.netty.channel.SimpleChannelUpstreamHandler.exceptionCaught(SimpleChannelUpstreamHandler.java:153) > > \> at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:112) > > \> at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564) > > \> at org.jboss.netty.channel.DefaultChannelPipeline$DefaultChannelHandlerContext.sendUpstream(DefaultChannelPipeline.java:791) > > \> at org.jboss.netty.channel.SimpleChannelUpstreamHandler.exceptionCaught(SimpleChannelUpstreamHandler.java:153) > > \> at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:112) > > \> at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564) > > \> at org.jboss.netty.channel.DefaultChannelPipeline$DefaultChannelHandlerContext.sendUpstream(DefaultChannelPipeline.java:791) > > \> at org.jboss.netty.handler.codec.frame.FrameDecoder.exceptionCaught(FrameDecoder.java:377) > > \> at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:112) > > \> at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564) > > \> at org.jboss.netty.channel.DefaultChannelPipeline$DefaultChannelHandlerContext.sendUpstream(DefaultChannelPipeline.java:791) > > \> at org.elasticsearch.common.netty.OpenChannelsHandler.handleUpstream(OpenChannelsHandler.java:75) > > \> at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564) > > \> at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:559) > > \> at org.jboss.netty.channel.Channels.fireExceptionCaught(Channels.java:525) > > \> at org.jboss.netty.channel.AbstractChannelSink.exceptionCaught(AbstractChannelSink.java:48) > > \> at org.jboss.netty.channel.DefaultChannelPipeline.notifyHandlerException(DefaultChannelPipeline.java:658) > > \> at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:566) > > \> at org.jboss.netty.channel.DefaultChannelPipeline$DefaultChannelHandlerContext.sendUpstream(DefaultChannelPipeline.java:791) > > \> at org.elasticsearch.common.netty.OpenChannelsHandler.handleUpstream(OpenChannelsHandler.java:75) > > \> at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564) > > \> at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:559) > > \> at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:268) > > \> at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:255) > > \> at org.jboss.netty.channel.socket.nio.NioWorker.read(NioWorker.java:88) > > \> at org.jboss.netty.channel.socket.nio.AbstractNioWorker.process(AbstractNioWorker.java:108) > > \> at org.jboss.netty.channel.socket.nio.AbstractNioSelector.run(AbstractNioSelector.java:337) > > \> at org.jboss.netty.channel.socket.nio.AbstractNioWorker.run(AbstractNioWorker.java:89) > > \> at org.jboss.netty.channel.socket.nio.NioWorker.run(NioWorker.java:178) > > \> at org.jboss.netty.util.ThreadRenamingRunnable.run(ThreadRenamingRunnable.java:108) > > \> at org.jboss.netty.util.internal.DeadLockProofWorker$1.run(DeadLockProofWorker.java:42) > > \> at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142) > > \> at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617) > > \> at java.lang.Thread.run(Thread.java:745) > > \> > > \> I don't know how to go further.. any help? > > \> > > \> -- > > \> You received this message because you are subscribed to the Google Groups "Search Guard" group. > > \> To unsubscribe from this group and stop receiving emails from it, send an email to search-guard...@googlegroups.com. > > \> To post to this group, send email to search...@googlegroups.com. > > \> To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/8e23992d-849e-4e45-aa20-0936600a0ca9%40googlegroups.com\](https://groups.google.com/d/msgid/search-guard/8e23992d-849e-4e45-aa20-0936600a0ca9%40googlegroups.com%5C). > > \> For more options, visit [https://groups.google.com/d/optout\](https://groups.google.com/d/optout%5C). > > > > -- > > You received this message because you are subscribed to the Google Groups "Search Guard" group. > > To unsubscribe from this group and stop receiving emails from it, send an email to search-guard+unsubscribe@googlegroups.com. > > To post to this group, send email to search-guard@googlegroups.com. > > To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/d03af516-dc0f-4b1c-a085-15cb28b37b2f%40googlegroups.com\](https://groups.google.com/d/msgid/search-guard/d03af516-dc0f-4b1c-a085-15cb28b37b2f%40googlegroups.com%5C). > > For more options, visit [https://groups.google.com/d/optout\](https://groups.google.com/d/optout%5C). ---
**Author:** ![\_Mic](https://avatars.discourse-cdn.com/v4/letter/_/ba8739/32.png) [@\_Mic](https://forum.search-guard.com/u/_Mic)\ **Post date:** [July 18, 2017, 8:53am UTC](https://forum.search-guard.com/t/no-certificates-error/513/8 "2017-07-18T08:53:38Z")
Sorry for the late, I was quite busy these days. I understand, but as I can read [here](https://github.com/floragunncom/search-guard-ssl/blob/master/searchguard-ssl-config-template.yml): # Enable or disable rest layer security - https, (default: false) #searchguard.ssl.http.enabled: true `` if I do not specify these lines and I do not use certificates in my curl, I should be able to reach REST API, but it is not my case: date; curl [http://admin:admin@localhost:9200/\_searchguard/api/user/admin](http://admin:admin@localhost:9200/_searchguard/api/user/admin) Tue Jul 18 10:27:09 CEST 2017 No certificates `` I also added the line searchguard.ssl.http.clientauth\_mode: OPTIONAL `` but nothing has changed… I do not understant what I have to do to make it running correctly. Any ideas? > **···** > > Il giorno martedì 11 luglio 2017 18:11:29 UTC+2, Search Guard ha scritto: > > > seems you miss the HTTPS config: > > > > searchguard.ssl.http.enabled: true > > > > searchguard.ssl.http.keystore\_filepath: keystore\_https\_node1.jks > > > > searchguard.ssl.http.truststore\_filepath: truststore\_https.jks > > > > … > > > > Pls read [https://github.com/floragunncom/search-guard-docs/blob/master/tls\_configuration.md#rest-layer-tls](https://github.com/floragunncom/search-guard-docs/blob/master/tls_configuration.md#rest-layer-tls) > > > > > Am 11.07.2017 um 17:12 schrieb –Mic [miche...@gmail.com](mailto:miche...@gmail.com): > > > > > Of course: > > > > > [node.name](http://node.name): node-1 > > > > > http.port: 9200 > > > > > searchguard.ssl.transport.keystore\_filepath: keystore.jks > > > > > searchguard.ssl.transport.keystore\_password: xxxxxxxxxxxx > > > > > searchguard.ssl.transport.truststore\_filepath: truststore.jks > > > > > searchguard.ssl.transport.truststore\_password: xxxxxxxxxxxx > > > > > searchguard.ssl.transport.enforce\_hostname\_verification: false > > > > > searchguard.authcz.admin\_dn: > > > > > - CN=sgadmin > > > > > Il giorno martedì 11 luglio 2017 16:27:28 UTC+2, Search Guard ha scritto: > > > > > pls post your elasticsearch.yml > > > > > > > Am 11.07.2017 um 14:23 schrieb –Mic [miche...@gmail.com](mailto:miche...@gmail.com): > > > > > > > > \*\* UPDATE \*\* > > > > > > > > With curl -vv option: > > > > > > > > curl -vv --cert /root/search-guard-certificates/client-certificates/CN=sgadmin.crtfull.pem --key /root/search-guard-certificates/client-certificates/CN=sgadmin.key.pem [https://admin:admin@localhost:9200/\_searchguard/api/user/admin](https://admin:admin@localhost:9200/_searchguard/api/user/admin) > > > > > > > > - About to connect() to localhost port 9200 (#0) > > > > - Trying 127.0.0.1… > > > > - Connected to localhost (127.0.0.1) port 9200 (#0) > > > > - Initializing NSS with certpath: sql:/etc/pki/nssdb > > > > - CAfile: /etc/pki/tls/certs/ca-bundle.crt > > > > CApath: none > > > > - NSS error -5938 (PR\_END\_OF\_FILE\_ERROR) > > > > - Encountered end of file > > > > - Closing connection 0 > > > > curl: (35) Encountered end of file > > > > > > > > I also checked Elasticsearch logs, which show this error whenever I send the curl request: > > > > > > > > [2017-07-11 12:38:36,013][WARN][http.netty] [node-1] Caught exception while handling client http traffic, closing connection [id: 0x7460fc66, /[127.0.0.1:37954](http://127.0.0.1:37954) =\> /[127.0.0.1:9200](http://127.0.0.1:9200)] > > > > java.lang.IllegalArgumentException: invalid version format: ﾫZﾵ~ﾢ{}VￋDﾋ￙ￇUￋDU6￀,￀ > > > > at org.jboss.netty.handler.codec.http.HttpVersion.(HttpVersion.java:94) > > > > at org.jboss.netty.handler.codec.http.HttpVersion.valueOf(HttpVersion.java:62) > > > > at org.jboss.netty.handler.codec.http.HttpRequestDecoder.createMessage(HttpRequestDecoder.java:75) > > > > at org.jboss.netty.handler.codec.http.HttpMessageDecoder.decode(HttpMessageDecoder.java:191) > > > > at org.jboss.netty.handler.codec.http.HttpMessageDecoder.decode(HttpMessageDecoder.java:102) > > > > at org.jboss.netty.handler.codec.replay.ReplayingDecoder.callDecode(ReplayingDecoder.java:500) > > > > at org.jboss.netty.handler.codec.replay.ReplayingDecoder.messageReceived(ReplayingDecoder.java:435) > > > > at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:70) > > > > at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564) > > > > at org.jboss.netty.channel.DefaultChannelPipeline$DefaultChannelHandlerContext.sendUpstream(DefaultChannelPipeline.java:791) > > > > at org.elasticsearch.common.netty.OpenChannelsHandler.handleUpstream(OpenChannelsHandler.java:75) > > > > at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564) > > > > at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:559) > > > > at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:268) > > > > at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:255) > > > > at org.jboss.netty.channel.socket.nio.NioWorker.read(NioWorker.java:88) > > > > at org.jboss.netty.channel.socket.nio.AbstractNioWorker.process(AbstractNioWorker.java:108) > > > > at org.jboss.netty.channel.socket.nio.AbstractNioSelector.run(AbstractNioSelector.java:337) > > > > at org.jboss.netty.channel.socket.nio.AbstractNioWorker.run(AbstractNioWorker.java:89) > > > > at org.jboss.netty.channel.socket.nio.NioWorker.run(NioWorker.java:178) > > > > at org.jboss.netty.util.ThreadRenamingRunnable.run(ThreadRenamingRunnable.java:108) > > > > at org.jboss.netty.util.internal.DeadLockProofWorker$1.run(DeadLockProofWorker.java:42) > > > > at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142) > > > > at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617) > > > > at java.lang.Thread.run(Thread.java:745) > > > > [2017-07-11 12:38:36,014][WARN][http.netty] [node-1] Caught exception while handling client http traffic, closing connection [id: 0x7460fc66, /[127.0.0.1:37954](http://127.0.0.1:37954) :\> /[127.0.0.1:9200](http://127.0.0.1:9200)] > > > > java.lang.IllegalArgumentException: invalid version format: ﾫZﾵ~ﾢ{}VￋDﾋ￙ￇUￋDU6￀,￀ > > > > at org.jboss.netty.handler.codec.http.HttpVersion.(HttpVersion.java:94) > > > > at org.jboss.netty.handler.codec.http.HttpVersion.valueOf(HttpVersion.java:62) > > > > at org.jboss.netty.handler.codec.http.HttpRequestDecoder.createMessage(HttpRequestDecoder.java:75) > > > > at org.jboss.netty.handler.codec.http.HttpMessageDecoder.decode(HttpMessageDecoder.java:191) > > > > at org.jboss.netty.handler.codec.http.HttpMessageDecoder.decode(HttpMessageDecoder.java:102) > > > > at org.jboss.netty.handler.codec.replay.ReplayingDecoder.callDecode(ReplayingDecoder.java:500) > > > > at org.jboss.netty.handler.codec.replay.ReplayingDecoder.cleanup(ReplayingDecoder.java:554) > > > > at org.jboss.netty.handler.codec.frame.FrameDecoder.channelDisconnected(FrameDecoder.java:365) > > > > at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:102) > > > > at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564) > > > > at org.jboss.netty.channel.DefaultChannelPipeline$DefaultChannelHandlerContext.sendUpstream(DefaultChannelPipeline.java:791) > > > > at org.elasticsearch.common.netty.OpenChannelsHandler.handleUpstream(OpenChannelsHandler.java:75) > > > > at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564) > > > > at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:559) > > > > at org.jboss.netty.channel.Channels.fireChannelDisconnected(Channels.java:396) > > > > at org.jboss.netty.channel.socket.nio.AbstractNioWorker.close(AbstractNioWorker.java:360) > > > > at org.jboss.netty.channel.socket.nio.NioServerSocketPipelineSink.handleAcceptedSocket(NioServerSocketPipelineSink.java:81) > > > > at org.jboss.netty.channel.socket.nio.NioServerSocketPipelineSink.eventSunk(NioServerSocketPipelineSink.java:36) > > > > at org.jboss.netty.channel.DefaultChannelPipeline$DefaultChannelHandlerContext.sendDownstream(DefaultChannelPipeline.java:779) > > > > at org.jboss.netty.handler.codec.oneone.OneToOneEncoder.handleDownstream(OneToOneEncoder.java:54) > > > > at org.jboss.netty.channel.DefaultChannelPipeline.sendDownstream(DefaultChannelPipeline.java:591) > > > > at org.jboss.netty.channel.DefaultChannelPipeline$DefaultChannelHandlerContext.sendDownstream(DefaultChannelPipeline.java:784) > > > > at org.jboss.netty.channel.SimpleChannelHandler.closeRequested(SimpleChannelHandler.java:334) > > > > at org.jboss.netty.channel.SimpleChannelHandler.handleDownstream(SimpleChannelHandler.java:260) > > > > at org.elasticsearch.http.netty.pipelining.HttpPipeliningHandler.handleDownstream(HttpPipeliningHandler.java:105) > > > > at org.jboss.netty.channel.DefaultChannelPipeline.sendDownstream(DefaultChannelPipeline.java:591) > > > > at org.jboss.netty.channel.DefaultChannelPipeline.sendDownstream(DefaultChannelPipeline.java:582) > > > > at org.jboss.netty.channel.Channels.close(Channels.java:812) > > > > at org.jboss.netty.channel.AbstractChannel.close(AbstractChannel.java:205) > > > > at org.elasticsearch.http.netty.NettyHttpServerTransport.exceptionCaught(NettyHttpServerTransport.java:467) > > > > at org.elasticsearch.http.netty.HttpRequestHandler.exceptionCaught(HttpRequestHandler.java:67) > > > > at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:112) > > > > at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564) > > > > at org.jboss.netty.channel.DefaultChannelPipeline$DefaultChannelHandlerContext.sendUpstream(DefaultChannelPipeline.java:791) > > > > at org.jboss.netty.channel.SimpleChannelHandler.exceptionCaught(SimpleChannelHandler.java:156) > > > > at org.jboss.netty.channel.SimpleChannelHandler.handleUpstream(SimpleChannelHandler.java:130) > > > > at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564) > > > > at org.jboss.netty.channel.DefaultChannelPipeline$DefaultChannelHandlerContext.sendUpstream(DefaultChannelPipeline.java:791) > > > > at org.jboss.netty.channel.SimpleChannelUpstreamHandler.exceptionCaught(SimpleChannelUpstreamHandler.java:153) > > > > at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:112) > > > > at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564) > > > > at org.jboss.netty.channel.DefaultChannelPipeline$DefaultChannelHandlerContext.sendUpstream(DefaultChannelPipeline.java:791) > > > > at org.jboss.netty.channel.SimpleChannelUpstreamHandler.exceptionCaught(SimpleChannelUpstreamHandler.java:153) > > > > at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:112) > > > > at org.jboss.netty.channel.DefaultChannelPipeline. ---
**Author:** ![searchguard\_google\_group](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/searchguard_google_group/32/462_2.png) [@searchguard\_google\_group](https://forum.search-guard.com/u/searchguard_google_group)\ **Post date:** [July 18, 2017, 1:34pm UTC](https://forum.search-guard.com/t/no-certificates-error/513/9 "2017-07-18T13:34:14Z")
the REST mngt api requires HTTPS, so you have to set "searchguard.ssl.http.enabled: true" and use certificates in your curl command see [https://github.com/floragunncom/search-guard-docs/blob/master/managementapi.md](https://github.com/floragunncom/search-guard-docs/blob/master/managementapi.md) > **···** > > > Am 18.07.2017 um 10:53 schrieb –Mic \: > > > > Sorry for the late, I was quite busy these days. I understand, but as I can read here: > > > > # Enable or disable rest layer security - https, (default: false) > > #searchguard.ssl.http.enabled: true > > > > if I do not specify these lines and I do not use certificates in my curl, I should be able to reach REST API, but it is not my case: > > > > date; curl [http://admin:admin@localhost:9200/\_searchguard/api/user/admin](http://admin:admin@localhost:9200/_searchguard/api/user/admin) > > Tue Jul 18 10:27:09 CEST 2017 > > No certificates > > > > I also added the line > > > > searchguard.ssl.http.clientauth\_mode: OPTIONAL > > > > but nothing has changed... I do not understant what I have to do to make it running correctly. Any ideas? > > > > Il giorno martedì 11 luglio 2017 18:11:29 UTC+2, Search Guard ha scritto: > > seems you miss the HTTPS config: > > > > searchguard.ssl.http.enabled: true > > searchguard.ssl.http.keystore\_filepath: keystore\_https\_node1.jks > > searchguard.ssl.http.truststore\_filepath: truststore\_https.jks > > ... > > > > Pls read [https://github.com/floragunncom/search-guard-docs/blob/master/tls\_configuration.md#rest-layer-tls](https://github.com/floragunncom/search-guard-docs/blob/master/tls_configuration.md#rest-layer-tls) > > > > \> Am 11.07.2017 um 17:12 schrieb –Mic \: > > \> > > \> Of course: > > \> > > \> node.name: node-1 > > \> http.port: 9200 > > \> searchguard.ssl.transport.keystore\_filepath: keystore.jks > > \> searchguard.ssl.transport.keystore\_password: xxxxxxxxxxxx > > \> searchguard.ssl.transport.truststore\_filepath: truststore.jks > > \> searchguard.ssl.transport.truststore\_password: xxxxxxxxxxxx > > \> searchguard.ssl.transport.enforce\_hostname\_verification: false > > \> searchguard.authcz.admin\_dn: > > \> - CN=sgadmin > > \> > > \> Il giorno martedì 11 luglio 2017 16:27:28 UTC+2, Search Guard ha scritto: > > \> pls post your elasticsearch.yml > > \> > > \> \> Am 11.07.2017 um 14:23 schrieb –Mic \: > > \> \> > > \> \> \*\* UPDATE \*\* > > \> \> > > \> \> With curl -vv option: > > \> \> > > \> \> curl -vv --cert /root/search-guard-certificates/client-certificates/CN\=sgadmin.crtfull.pem --key /root/search-guard-certificates/client-certificates/CN\=sgadmin.key.pem [https://admin:admin@localhost:9200/\_searchguard/api/user/admin](https://admin:admin@localhost:9200/_searchguard/api/user/admin) > > \> \> \* About to connect() to localhost port 9200 (#0) > > \> \> \* Trying 127.0.0.1... > > \> \> \* Connected to localhost (127.0.0.1) port 9200 (#0) > > \> \> \* Initializing NSS with certpath: sql:/etc/pki/nssdb > > \> \> \* CAfile: /etc/pki/tls/certs/ca-bundle.crt > > \> \> CApath: none > > \> \> \* NSS error -5938 (PR\_END\_OF\_FILE\_ERROR) > > \> \> \* Encountered end of file > > \> \> \* Closing connection 0 > > \> \> curl: (35) Encountered end of file > > \> \> > > \> \> > > \> \> > > \> \> I also checked Elasticsearch logs, which show this error whenever I send the curl request: > > \> \> > > \> \> [2017-07-11 12:38:36,013][WARN][http.netty] [node-1] Caught exception while handling client http traffic, closing connection [id: 0x7460fc66, /127.0.0.1:37954 =\> /127.0.0.1:9200] > > \> \> java.lang.IllegalArgumentException: invalid version format: ﾫZﾵ~ﾢ{}VￋDﾋ￙ￇUￋDU6￀,￀ > > \> \> at org.jboss.netty.handler.codec.http.HttpVersion.\(HttpVersion.java:94) > > \> \> at org.jboss.netty.handler.codec.http.HttpVersion.valueOf(HttpVersion.java:62) > > \> \> at org.jboss.netty.handler.codec.http.HttpRequestDecoder.createMessage(HttpRequestDecoder.java:75) > > \> \> at org.jboss.netty.handler.codec.http.HttpMessageDecoder.decode(HttpMessageDecoder.java:191) > > \> \> at org.jboss.netty.handler.codec.http.HttpMessageDecoder.decode(HttpMessageDecoder.java:102) > > \> \> at org.jboss.netty.handler.codec.replay.ReplayingDecoder.callDecode(ReplayingDecoder.java:500) > > \> \> at org.jboss.netty.handler.codec.replay.ReplayingDecoder.messageReceived(ReplayingDecoder.java:435) > > \> \> at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:70) > > \> \> at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564) > > \> \> at org.jboss.netty.channel.DefaultChannelPipeline$DefaultChannelHandlerContext.sendUpstream(DefaultChannelPipeline.java:791) > > \> \> at org.elasticsearch.common.netty.OpenChannelsHandler.handleUpstream(OpenChannelsHandler.java:75) > > \> \> at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564) > > \> \> at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:559) > > \> \> at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:268) > > \> \> at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:255) > > \> \> at org.jboss.netty.channel.socket.nio.NioWorker.read(NioWorker.java:88) > > \> \> at org.jboss.netty.channel.socket.nio.AbstractNioWorker.process(AbstractNioWorker.java:108) > > \> \> at org.jboss.netty.channel.socket.nio.AbstractNioSelector.run(AbstractNioSelector.java:337) > > \> \> at org.jboss.netty.channel.socket.nio.AbstractNioWorker.run(AbstractNioWorker.java:89) > > \> \> at org.jboss.netty.channel.socket.nio.NioWorker.run(NioWorker.java:178) > > \> \> at org.jboss.netty.util.ThreadRenamingRunnable.run(ThreadRenamingRunnable.java:108) > > \> \> at org.jboss.netty.util.internal.DeadLockProofWorker$1.run(DeadLockProofWorker.java:42) > > \> \> at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142) > > \> \> at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617) > > \> \> at java.lang.Thread.run(Thread.java:745) > > \> \> [2017-07-11 12:38:36,014][WARN][http.netty] [node-1] Caught exception while handling client http traffic, closing connection [id: 0x7460fc66, /127.0.0.1:37954 :\> /127.0.0.1:9200] > > \> \> java.lang.IllegalArgumentException: invalid version format: ﾫZﾵ~ﾢ{}VￋDﾋ￙ￇUￋDU6￀,￀ > > \> \> at org.jboss.netty.handler.codec.http.HttpVersion.\(HttpVersion.java:94) > > \> \> at org.jboss.netty.handler.codec.http.HttpVersion.valueOf(HttpVersion.java:62) > > \> \> at org.jboss.netty.handler.codec.http.HttpRequestDecoder.createMessage(HttpRequestDecoder.java:75) > > \> \> at org.jboss.netty.handler.codec.http.HttpMessageDecoder.decode(HttpMessageDecoder.java:191) > > \> \> at org.jboss.netty.handler.codec.http.HttpMessageDecoder.decode(HttpMessageDecoder.java:102) > > \> \> at org.jboss.netty.handler.codec.replay.ReplayingDecoder.callDecode(ReplayingDecoder.java:500) > > \> \> at org.jboss.netty.handler.codec.replay.ReplayingDecoder.cleanup(ReplayingDecoder.java:554) > > \> \> at org.jboss.netty.handler.codec.frame.FrameDecoder.channelDisconnected(FrameDecoder.java:365) > > \> \> at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:102) > > \> \> at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564) > > \> \> at org.jboss.netty.channel.DefaultChannelPipeline$DefaultChannelHandlerContext.sendUpstream(DefaultChannelPipeline.java:791) > > \> \> at org.elasticsearch.common.netty.OpenChannelsHandler.handleUpstream(OpenChannelsHandler.java:75) > > \> \> at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564) > > \> \> at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:559) > > \> \> at org.jboss.netty.channel.Channels.fireChannelDisconnected(Channels.java:396) > > \> \> at org.jboss.netty.channel.socket.nio.AbstractNioWorker.close(AbstractNioWorker.java:360) > > \> \> at org.jboss.netty.channel.socket.nio.NioServerSocketPipelineSink.handleAcceptedSocket(NioServerSocketPipelineSink.java:81) > > \> \> at org.jboss.netty.channel.socket.nio.NioServerSocketPipelineSink.eventSunk(NioServerSocketPipelineSink.java:36) > > \> \> at org.jboss.netty.channel.DefaultChannelPipeline$DefaultChannelHandlerContext.sendDownstream(DefaultChannelPipeline.java:779) > > \> \> at org.jboss.netty.handler.codec.oneone.OneToOneEncoder.handleDownstream(OneToOneEncoder.java:54) > > \> \> at org.jboss.netty.channel.DefaultChannelPipeline.sendDownstream(DefaultChannelPipeline.java:591) > > \> \> at org.jboss.netty.channel.DefaultChannelPipeline$DefaultChannelHandlerContext.sendDownstream(DefaultChannelPipeline.java:784) > > \> \> at org.jboss.netty.channel.SimpleChannelHandler.closeRequested(SimpleChannelHandler.java:334) > > \> \> at org.jboss.netty.channel.SimpleChannelHandler.handleDownstream(SimpleChannelHandler.java:260) > > \> \> at org.elasticsearch.http.netty.pipelining.HttpPipeliningHandler.handleDownstream(HttpPipeliningHandler.java:105) > > \> \> at org.jboss.netty.channel.DefaultChannelPipeline.sendDownstream(DefaultChannelPipeline.java:591) > > \> \> at org.jboss.netty.channel.DefaultChannelPipeline.sendDownstream(DefaultChannelPipeline.java:582) > > \> \> at org.jboss.netty.channel.Channels.close(Channels.java:812) > > \> \> at org.jboss.netty.channel.AbstractChannel.close(AbstractChannel.java:205) > > \> \> at org.elasticsearch.http.netty.NettyHttpServerTransport.exceptionCaught(NettyHttpServerTransport.java:467) > > \> \> at org.elasticsearch.http.netty.HttpRequestHandler.exceptionCaught(HttpRequestHandler.java:67) > > \> \> at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:112) > > \> \> at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564) > > \> \> at org.jboss.netty.channel.DefaultChannelPipeline$DefaultChannelHandlerContext.sendUpstream(DefaultChannelPipeline.java:791) > > \> \> at org.jboss.netty.channel.SimpleChannelHandler.exceptionCaught(SimpleChannelHandler.java:156) > > \> \> at org.jboss.netty.channel.SimpleChannelHandler.handleUpstream(SimpleChannelHandler.java:130) > > \> \> at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564) > > \> \> at org.jboss.netty.channel.DefaultChannelPipeline$DefaultChannelHandlerContext.sendUpstream(DefaultChannelPipeline.java:791) > > \> \> at org.jboss.netty.channel.SimpleChannelUpstreamHandler.exceptionCaught(SimpleChannelUpstreamHandler.java:153) > > \> \> at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:112) > > \> \> at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564) > > \> \> at org.jboss.netty.channel.DefaultChannelPipeline$DefaultChannelHandlerContext.sendUpstream(DefaultChannelPipeline.java:791) > > \> \> at org.jboss.netty.channel.SimpleChannelUpstreamHandler.exceptionCaught(SimpleChannelUpstreamHandler.java:153) > > \> \> at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:112) > > \> \> at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564) > > \> \> at org.jboss.netty.channel.DefaultChannelPipeline$DefaultChannelHandlerContext.sendUpstream(DefaultChannelPipeline.java:791) > > \> \> at org.jboss.netty.handler.codec.frame.FrameDecoder.exceptionCaught(FrameDecoder.java:377) > > \> \> at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:112) > > \> \> at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564) > > \> \> at org.jboss.netty.channel.DefaultChannelPipeline$DefaultChannelHandlerContext.sendUpstream(DefaultChannelPipeline.java:791) > > \> \> at org.elasticsearch.common.netty.OpenChannelsHandler.handleUpstream(OpenChannelsHandler.java:75) > > \> \> at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564) > > \> \> at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:559) > > \> \> at org.jboss.netty.channel.Channels.fireExceptionCaught(Channels.java:525) > > \> \> at org.jboss.netty.channel.AbstractChannelSink.exceptionCaught(AbstractChannelSink.java:48) > > \> \> at org.jboss.netty.channel.DefaultChannelPipeline.notifyHandlerException(DefaultChannelPipeline.java:658) > > \> \> at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:566) > > \> \> at org.jboss.netty.channel.DefaultChannelPipeline$DefaultChannelHandlerContext.sendUpstream(DefaultChannelPipeline.java:791) > > \> \> at org.elasticsearch.common.netty.OpenChannelsHandler.handleUpstream(OpenChannelsHandler.java:75) > > \> \> at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564) > > \> \> at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:559) > > \> \> at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:268) > > \> \> at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:255) > > \> \> at org.jboss.netty.channel.socket.nio.NioWorker.read(NioWorker.java:88) > > \> \> at org.jboss.netty.channel.socket.nio.AbstractNioWorker.process(AbstractNioWorker.java:108) > > \> \> at org.jboss.netty.channel.socket.nio.AbstractNioSelector.run(AbstractNioSelector.java:337) > > \> \> at org.jboss.netty.channel.socket.nio.AbstractNioWorker.run(AbstractNioWorker.java:89) > > \> \> at org.jboss.netty.channel.socket.nio.NioWorker.run(NioWorker.java:178) > > \> \> at org.jboss.netty.util.ThreadRenamingRunnable.run(ThreadRenamingRunnable.java:108) > > \> \> at org.jboss.netty.util.internal.DeadLockProofWorker$1.run(DeadLockProofWorker.java:42) > > \> \> at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142) > > \> \> at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617) > > \> \> at java.lang.Thread.run(Thread.java:745) > > \> \> > > \> \> I don't know how to go further.. any help? > > \> \> > > \> \> -- > > \> \> You received this message because you are subscribed to the Google Groups "Search Guard" group. > > \> \> To unsubscribe from this group and stop receiving emails from it, send an email to search-guard...@googlegroups.com. > > \> \> To post to this group, send email to search...@googlegroups.com. > > \> \> To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/8e23992d-849e-4e45-aa20-0936600a0ca9%40googlegroups.com\](https://groups.google.com/d/msgid/search-guard/8e23992d-849e-4e45-aa20-0936600a0ca9%40googlegroups.com%5C). > > \> \> For more options, visit [https://groups.google.com/d/optout\](https://groups.google.com/d/optout%5C). > > \> > > \> > > \> -- > > \> You received this message because you are subscribed to the Google Groups "Search Guard" group. > > \> To unsubscribe from this group and stop receiving emails from it, send an email to search-guard...@googlegroups.com. > > \> To post to this group, send email to search...@googlegroups.com. > > \> To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/d03af516-dc0f-4b1c-a085-15cb28b37b2f%40googlegroups.com\](https://groups.google.com/d/msgid/search-guard/d03af516-dc0f-4b1c-a085-15cb28b37b2f%40googlegroups.com%5C). > > \> For more options, visit [https://groups.google.com/d/optout\](https://groups.google.com/d/optout%5C). > > > > -- > > You received this message because you are subscribed to the Google Groups "Search Guard" group. > > To unsubscribe from this group and stop receiving emails from it, send an email to search-guard+unsubscribe@googlegroups.com. > > To post to this group, send email to search-guard@googlegroups.com. > > To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/c831867a-8657-4885-b7f8-b311af0ac6ac%40googlegroups.com\](https://groups.google.com/d/msgid/search-guard/c831867a-8657-4885-b7f8-b311af0ac6ac%40googlegroups.com%5C). > > For more options, visit [https://groups.google.com/d/optout\](https://groups.google.com/d/optout%5C).