[search-guard group] Config Search Guard SSL error

Search Guard
1

pls. post the errors from sgadmin

···

Am 09.03.2017 um 16:21 schrieb Rockdale <rockdale.green@gmail.com>:

HI, all:

I followed this instruction to install and config search guard SSL

https://github.com/floragunncom/search-guard-ssl-docs/blob/master/quickstart.md

I have installed the plugin, generated the keystore and truststore using the TLS generator service, copied these files to config folder and added the configurations to the elasticsearch.yml file. started elasticsearch and everything looks fine.

But when I visit this url http://serveripaddress:9200/_searchguard/sslinfo?pretty

I got the following error:

Search Guard not initialized (SG11). See https://github.com/floragunncom/search-guard-docs/blob/master/sgadmin.md

After some reading, I went ahead to execute the command
./sgadmin.sh -ts <path/to/truststore> -tspass <truststore password> -ks <path/to/keystore> -kspass <keystore password> -cd ../sgconfig -icl -nhnv

I got more errors that I do not even understand. (I can post those errors later, not around that server at this moment)

What did I miss?

Do I need to access the url on the same server using http://127.0.0.1:9200/_searchguard/sslinfo?pretty\. I do not have web browser installed on the server so I use the web browser on another machine and access the through server ip address (not 127.0.0.1)

In the elasticsearch.yml file , I only added the following lines
searchguard.ssl.transport.keystore_filepath: node-0-keystore.jks
searchguard.ssl.transport.keystore_password: changeit
searchguard.ssl.transport.truststore_filepath: truststore.jks
searchguard.ssl.transport.truststore_password: changeit
searchguard.ssl.transport.enforce_hostname_verification: false

But when reading Install Serach Guard
https://github.com/floragunncom/search-guard-docs/blob/master/installation.md

It talked about Configure the admin certificate and there is a line in the elasticsearch.yml
searchguard.authcz.admin_dn:
  - cn=admin,ou=Test,ou=ou,dc=company,dc=com

This is after Search Guard SSL successfully installed, right. I am confused if this is the cause of the issue I am having.

Any help will be appreciated. Thanks in advance
-rockdale

--
You received this message because you are subscribed to the Google Groups "Search Guard" group.
To unsubscribe from this group and stop receiving emails from it, send an email to search-guard+unsubscribe@googlegroups.com.
To post to this group, send email to search-guard@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/search-guard/836b166b-ce4c-4ccb-b948-c6d7cae4f024%40googlegroups.com\.
For more options, visit https://groups.google.com/d/optout\.