Not able to access rest layer , https through chrome browser throwing error ERR_SSL_VERSION_OR_CIPHE

Search Guard
1

I am not able to access https://hostname:9200/_cat/indices, through chrome browser throwing error ERR_SSL_VERSION_OR_CIPHE, if i add
following statment in elasticsearch.yml file

searchguard.ssl.http.enabled_protocols:

  • “TLSv1.2”

i am getting following exception:

[2017-06-10T18:15:51,074][INFO ][o.e.p.PluginsService ] [2m4DZ9l] loaded module [transport-netty4]

[2017-06-10T18:15:51,075][INFO ][o.e.p.PluginsService ] [2m4DZ9l] loaded plugin [search-guard-ssl]

[2017-06-10T18:15:52,632][ERROR][o.e.b.Bootstrap ] Exception

java.lang.IllegalArgumentException: unknown setting [searchguard.ssl.http.enabled_protocols.0] did you mean any of [searchguard.ssl.http.enabled_protocols, searchguard.ssl.transport.enabled_protocols, searchguard.ssl.http.enabled_ciphers]?

at org.elasticsearch.common.settings.AbstractScopedSettings.validate(AbstractScopedSettings.java:276) ~[elasticsearch-5.2.2.jar:5.2.2]

at org.elasticsearch.common.settings.AbstractScopedSettings.validate(AbstractScopedSettings.java:244) ~[elasticsearch-5.2.2.jar:5.2.2]

at org.elasticsearch.common.settings.SettingsModule.(SettingsModule.java:138) ~[elasticsearch-5.2.2.jar:5.2.2]

at org.elasticsearch.node.Node.(Node.java:328) ~[elasticsearch-5.2.2.jar:5.2.2]

at org.elasticsearch.node.Node.(Node.java:232) ~[elasticsearch-5.2.2.jar:5.2.2]

at org.elasticsearch.bootstrap.Bootstrap$6.(Bootstrap.java:241) ~[elasticsearch-5.2.2.jar:5.2.2]

at org.elasticsearch.bootstrap.Bootstrap.setup(Bootstrap.java:241) ~[elasticsearch-5.2.2.jar:5.2.2]

at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:333) [elasticsearch-5.2.2.jar:5.2.2]

at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:121) [elasticsearch-5.2.2.jar:5.2.2]

at org.elasticsearch.bootstrap.Elasticsearch.execute(Elasticsearch.java:112) [elasticsearch-5.2.2.jar:5.2.2]

at org.elasticsearch.cli.SettingCommand.execute(SettingCommand.java:54) [elasticsearch-5.2.2.jar:5.2.2]

at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:122) [elasticsearch-5.2.2.jar:5.2.2]

at org.elasticsearch.cli.Command.main(Command.java:88) [elasticsearch-5.2.2.jar:5.2.2]

at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:89) [elasticsearch-5.2.2.jar:5.2.2]

at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:82) [elasticsearch-5.2.2.jar:5.2.2]

[2017-06-10T18:15:52,644][WARN ][o.e.b.ElasticsearchUncaughtExceptionHandler] uncaught exception in thread [main]

Any help would be appriciate…

2

Thanks for reporting this! It’s actually a bug, a fix will be provided with the next version of Search Guard, scheduled for next week.

···

On Saturday, June 10, 2017 at 2:57:53 PM UTC+2, Mohammed Gouse Basha wrote:

I am not able to access https://hostname:9200/_cat/indices, through chrome browser throwing error ERR_SSL_VERSION_OR_CIPHE, if i add
following statment in elasticsearch.yml file

searchguard.ssl.http.enabled_protocols:

  • “TLSv1.2”

i am getting following exception:

[2017-06-10T18:15:51,074][INFO ][o.e.p.PluginsService ] [2m4DZ9l] loaded module [transport-netty4]

[2017-06-10T18:15:51,075][INFO ][o.e.p.PluginsService ] [2m4DZ9l] loaded plugin [search-guard-ssl]

[2017-06-10T18:15:52,632][ERROR][o.e.b.Bootstrap ] Exception

java.lang.IllegalArgumentException: unknown setting [searchguard.ssl.http.enabled_protocols.0] did you mean any of [searchguard.ssl.http.enabled_protocols, searchguard.ssl.transport.enabled_protocols, searchguard.ssl.http.enabled_ciphers]?

at org.elasticsearch.common.settings.AbstractScopedSettings.validate(AbstractScopedSettings.java:276) ~[elasticsearch-5.2.2.jar:5.2.2]

at org.elasticsearch.common.settings.AbstractScopedSettings.validate(AbstractScopedSettings.java:244) ~[elasticsearch-5.2.2.jar:5.2.2]

at org.elasticsearch.common.settings.SettingsModule.(SettingsModule.java:138) ~[elasticsearch-5.2.2.jar:5.2.2]

at org.elasticsearch.node.Node.(Node.java:328) ~[elasticsearch-5.2.2.jar:5.2.2]

at org.elasticsearch.node.Node.(Node.java:232) ~[elasticsearch-5.2.2.jar:5.2.2]

at org.elasticsearch.bootstrap.Bootstrap$6.(Bootstrap.java:241) ~[elasticsearch-5.2.2.jar:5.2.2]

at org.elasticsearch.bootstrap.Bootstrap.setup(Bootstrap.java:241) ~[elasticsearch-5.2.2.jar:5.2.2]

at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:333) [elasticsearch-5.2.2.jar:5.2.2]

at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:121) [elasticsearch-5.2.2.jar:5.2.2]

at org.elasticsearch.bootstrap.Elasticsearch.execute(Elasticsearch.java:112) [elasticsearch-5.2.2.jar:5.2.2]

at org.elasticsearch.cli.SettingCommand.execute(SettingCommand.java:54) [elasticsearch-5.2.2.jar:5.2.2]

at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:122) [elasticsearch-5.2.2.jar:5.2.2]

at org.elasticsearch.cli.Command.main(Command.java:88) [elasticsearch-5.2.2.jar:5.2.2]

at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:89) [elasticsearch-5.2.2.jar:5.2.2]

at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:82) [elasticsearch-5.2.2.jar:5.2.2]

[2017-06-10T18:15:52,644][WARN ][o.e.b.ElasticsearchUncaughtExceptionHandler] uncaught exception in thread [main]

Any help would be appriciate…