SC TLS Issue, i could not generate the Certificate using the tool . it opens up a notepad with java need to be set. not sure what i am missing here

If you think it is a bug report or you have a technical issue, please answer the following questions. For general questions, you can delete these questions.

**Elasticsearch version:**7.17.3

Server OS version: Windows 2019 server

Kibana version (if relevant): 7.17.3

Browser version (if relevant):

Browser OS version (if relevant):

Describe the issue:

Steps to reproduce:
1.
2.
3.

Expected behavior:

Provide configuration:
elasticsearch/config/elasticsearch.yml
elasticsearch/plugins/search-guard-7/sgconfig/sg_config.yml
kibana/config/kibana.yml (if relevant)

Provide logs:
Elasticsearch
Kibana (if relevant)

Screenshots (if relevant):

Errors in browser console (if relevant):

Additional data:

@amalk12 Do you refer to offline TLS tool? If so, could you share your command and the output of that command?

Yes, i am referring to the offline TLS tool. which i am running to get the certificates created .

installation directory>/tools/sgtlstool.sh -c ../config/tlsconfig.yml -ca -crt
This is the command given in the website. 

I am trying to run the command from the Windows machine please find the screenshot below:
 ./sgtlstool.bat -c  ../config/example.yml -ca -crt 
It says system cannot find the path specified 



@amalk12 This example is for the Linux file system so you need to use a back slash instead of a forward slash.

When you edit the sgtlstool.bat file you’ll see the following commands.

In the last line, the script uses %JAVA_HOME% variable. If that variable is empty or points to a non-existing folder, it will generate the observed error.

Try the following to troubleshoot

  1. Check if JAVA is installed on your Windows system.
  2. If installed, check where %JAVA_HOME% variable points and does the location exists.

echo %JAVA_HOME%

Remember to restart your command line every time when making changes in your system variables.

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.