# Search Guard not initialized (SG11) for indices:admin/exists for sgadmin

**URL:** <https://forum.search-guard.com/t/search-guard-not-initialized-sg11-for-indices-admin-exists-for-sgadmin/567>\
**Category:** Search Guard\
**Created:** [August 16, 2017, 5:53pm UTC](https://forum.search-guard.com/t/search-guard-not-initialized-sg11-for-indices-admin-exists-for-sgadmin/567 "2017-08-16T17:53:32Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Frank\_Maritato](https://avatars.discourse-cdn.com/v4/letter/f/e47c2d/32.png) [@Frank\_Maritato](https://forum.search-guard.com/u/Frank_Maritato)\
**Post date:** [August 16, 2017, 5:53pm UTC](https://forum.search-guard.com/t/search-guard-not-initialized-sg11-for-indices-admin-exists-for-sgadmin/567/1 "2017-08-16T17:53:32Z")

</div>

Hi,

I am running ES 5.5.1 and I have search-guard-5:5.5.1-15 plugin installed. We have a wildcard certificate that I’m trying to get installed in SearchGuard.

I’m running this command:

> ./sgadmin.sh -ts /etc/elasticsearch/truststore.jks -tspass changeit -ks /etc/elasticsearch/keystore.jks -kspass changeit -cn es -nhnv -cd …/sgconfig -h [es-host.mydomain.com](http://es-host.mydomain.com)

and getting this error:

> ERR: An unexpected ElasticsearchSecurityException occured: Search Guard not initialized (SG11) for indices:admin/exists. See [https://github.com/floragunncom/search-guard-docs/blob/master/sgadmin.md](https://github.com/floragunncom/search-guard-docs/blob/master/sgadmin.md)
> 
> Trace:
> 
> ElasticsearchSecurityException[Search Guard not initialized (SG11) for indices:admin/exists. See [https://github.com/floragunncom/search-guard-docs/blob/master/sgadmin.md](https://github.com/floragunncom/search-guard-docs/blob/master/sgadmin.md)]  
> at com.floragunn.searchguard.filter.SearchGuardFilter.apply(SearchGuardFilter.java:128)  
> at org.elasticsearch.action.support.TransportAction$RequestFilterChain.proceed(TransportAction.java:168)  
> at org.elasticsearch.action.support.TransportAction.execute(TransportAction.java:142)  
> at org.elasticsearch.action.support.HandledTransportAction$TransportHandler.messageReceived(HandledTransportAction.java:64)  
> at org.elasticsearch.action.support.HandledTransportAction$TransportHandler.messageReceived(HandledTransportAction.java:54)  
> at com.floragunn.searchguard.ssl.transport.SearchGuardSSLRequestHandler.messageReceivedDecorate(SearchGuardSSLRequestHandler.java:178)  
> at com.floragunn.searchguard.transport.SearchGuardRequestHandler.messageReceivedDecorate(SearchGuardRequestHandler.java:192)  
> at com.floragunn.searchguard.ssl.transport.SearchGuardSSLRequestHandler.messageReceived(SearchGuardSSLRequestHandler.java:140)  
> at com.floragunn.searchguard.SearchGuardPlugin$3$1.messageReceived(SearchGuardPlugin.java:376)  
> at org.elasticsearch.transport.RequestHandlerRegistry.processMessageReceived(RequestHandlerRegistry.java:69)  
> at org.elasticsearch.transport.TcpTransport$RequestHandler.doRun(TcpTransport.java:1544)  
> at org.elasticsearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java:37)  
> at org.elasticsearch.common.util.concurrent.EsExecutors$1.execute(EsExecutors.java:110)  
> at org.elasticsearch.transport.TcpTransport.handleRequest(TcpTransport.java:1501)  
> at org.elasticsearch.transport.TcpTransport.messageReceived(TcpTransport.java:1385)  
> at org.elasticsearch.transport.netty4.Netty4MessageChannelHandler.channelRead(Netty4MessageChannelHandler.java:74)  
> at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:362)  
> at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:348)  
> at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:340)  
> at io.netty.handler.codec.ByteToMessageDecoder.fireChannelRead(ByteToMessageDecoder.java:310)  
> at io.netty.handler.codec.ByteToMessageDecoder.fireChannelRead(ByteToMessageDecoder.java:297)  
> at io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:413)  
> at io.netty.handler.codec.ByteToMessageDecoder.channelRead(ByteToMessageDecoder.java:265)  
> at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:362)  
> at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:348)  
> at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:340)  
> at io.netty.channel.ChannelInboundHandlerAdapter.channelRead(ChannelInboundHandlerAdapter.java:86)  
> at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:362)  
> at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:348)  
> at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:340)  
> at io.netty.handler.ssl.SslHandler.unwrap(SslHandler.java:1267  
> at io.netty.handler.ssl.SslHandler.decode(SslHandler.java:1078)  
> at io.netty.handler.codec.ByteToMessageDecoder.decodeRemovalReentryProtection(ByteToMessageDecoder.java:489)  
> at io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:428)  
> at io.netty.handler.codec.ByteToMessageDecoder.channelRead(ByteToMessageDecoder.java:265)  
> at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:362)  
> at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:348)  
> at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:340)  
> at io.netty.channel.DefaultChannelPipeline$HeadContext.channelRead(DefaultChannelPipeline.java:1334)  
> at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:362)  
> at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:348)  
> at io.netty.channel.DefaultChannelPipeline.fireChannelRead(DefaultChannelPipeline.java:926)  
> at io.netty.channel.nio.AbstractNioByteChannel$NioByteUnsafe.read(AbstractNioByteChannel.java:134)  
> at io.netty.channel.nio.NioEventLoop.processSelectedKey(NioEventLoop.java:644)  
> at io.netty.channel.nio.NioEventLoop.processSelectedKeysPlain(NioEventLoop.java:544)  
> at io.netty.channel.nio.NioEventLoop.processSelectedKeys(NioEventLoop.java:498)  
> at io.netty.channel.nio.NioEventLoop.run(NioEventLoop.java:458)  
> at io.netty.util.concurrent.SingleThreadEventExecutor$5.run(SingleThreadEventExecutor.java:858)  
> at java.lang.Thread.run(Thread.java:748)

here are the relevant entries in elasticsearch.yml

> searchguard.ssl.transport.enabled: true  
> searchguard.ssl.transport.keystore\_filepath: keystore.jks  
> searchguard.ssl.transport.keystore\_password: changeit  
> searchguard.ssl.transport.truststore\_filepath: truststore.jks  
> searchguard.ssl.transport.truststore\_password: changeit  
> searchguard.ssl.transport.enforce\_hostname\_verification: false  
> searchguard.ssl.http.enabled: true  
> searchguard.ssl.http.keystore\_filepath: keystore.jks  
> searchguard.ssl.http.keystore\_password: changeit  
> searchguard.ssl.http.truststore\_filepath: truststore.jks  
> searchguard.ssl.http.truststore\_password: changeit  
> searchguard.nodes\_dn:
> 
> - ‘\*’  
> searchguard.authcz.admin\_dn:
> - “CN=\*.mydomain.com,OU=,O=MyCompany,L=Los Angeles,C=US”

Anyone know how to fix this or get more information?

Thanks!

Frank

---

<div class="post-metadata">

**Author:** ![Anthony\_Cleaves1](https://avatars.discourse-cdn.com/v4/letter/a/da6949/32.png) [@Anthony\_Cleaves1](https://forum.search-guard.com/u/Anthony_Cleaves1)\
**Post date:** [August 16, 2017, 6:39pm UTC](https://forum.search-guard.com/t/search-guard-not-initialized-sg11-for-indices-admin-exists-for-sgadmin/567/2 "2017-08-16T18:39:26Z")

</div>

Does your cert contain the relevant OID information?

> **···**
>
> On Wednesday, 16 August 2017 18:53:32 UTC+1, Frank Maritato wrote:
> 
> > Hi,
> 
> > I am running ES 5.5.1 and I have search-guard-5:5.5.1-15 plugin installed. We have a wildcard certificate that I’m trying to get installed in SearchGuard.
> 
> > I’m running this command:
> 
> > > ./sgadmin.sh -ts /etc/elasticsearch/truststore.jks -tspass changeit -ks /etc/elasticsearch/keystore.jks -kspass changeit -cn es -nhnv -cd …/sgconfig -h [es-host.mydomain.com](http://es-host.mydomain.com)
> > 
> > and getting this error:
> > 
> > > ERR: An unexpected ElasticsearchSecurityException occured: Search Guard not initialized (SG11) for indices:admin/exists. See [https://github.com/floragunncom/search-guard-docs/blob/master/sgadmin.md](https://github.com/floragunncom/search-guard-docs/blob/master/sgadmin.md)
> > > 
> > > Trace:
> > > 
> > > ElasticsearchSecurityException[Search Guard not initialized (SG11) for indices:admin/exists. See [https://github.com/floragunncom/search-guard-docs/blob/master/sgadmin.md](https://github.com/floragunncom/search-guard-docs/blob/master/sgadmin.md)]  
> > > at com.floragunn.searchguard.filter.SearchGuardFilter.apply(SearchGuardFilter.java:128)  
> > > at org.elasticsearch.action.support.TransportAction$RequestFilterChain.proceed(TransportAction.java:168)  
> > > at org.elasticsearch.action.support.TransportAction.execute(TransportAction.java:142)  
> > > at org.elasticsearch.action.support.HandledTransportAction$TransportHandler.messageReceived(HandledTransportAction.java:64)  
> > > at org.elasticsearch.action.support.HandledTransportAction$TransportHandler.messageReceived(HandledTransportAction.java:54)  
> > > at com.floragunn.searchguard.ssl.transport.SearchGuardSSLRequestHandler.messageReceivedDecorate(SearchGuardSSLRequestHandler.java:178)  
> > > at com.floragunn.searchguard.transport.SearchGuardRequestHandler.messageReceivedDecorate(SearchGuardRequestHandler.java:192)  
> > > at com.floragunn.searchguard.ssl.transport.SearchGuardSSLRequestHandler.messageReceived(SearchGuardSSLRequestHandler.java:140)  
> > > at com.floragunn.searchguard.SearchGuardPlugin$3$1.messageReceived(SearchGuardPlugin.java:376)  
> > > at org.elasticsearch.transport.RequestHandlerRegistry.processMessageReceived(RequestHandlerRegistry.java:69)  
> > > at org.elasticsearch.transport.TcpTransport$RequestHandler.doRun(TcpTransport.java:1544)  
> > > at org.elasticsearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java:37)  
> > > at org.elasticsearch.common.util.concurrent.EsExecutors$1.execute(EsExecutors.java:110)  
> > > at org.elasticsearch.transport.TcpTransport.handleRequest(TcpTransport.java:1501)  
> > > at org.elasticsearch.transport.TcpTransport.messageReceived(TcpTransport.java:1385)  
> > > at org.elasticsearch.transport.netty4.Netty4MessageChannelHandler.channelRead(Netty4MessageChannelHandler.java:74)  
> > > at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:362)  
> > > at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:348)  
> > > at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:340)  
> > > at io.netty.handler.codec.ByteToMessageDecoder.fireChannelRead(ByteToMessageDecoder.java:310)  
> > > at io.netty.handler.codec.ByteToMessageDecoder.fireChannelRead(ByteToMessageDecoder.java:297)  
> > > at io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:413)  
> > > at io.netty.handler.codec.ByteToMessageDecoder.channelRead(ByteToMessageDecoder.java:265)  
> > > at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:362)  
> > > at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:348)  
> > > at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:340)  
> > > at io.netty.channel.ChannelInboundHandlerAdapter.channelRead(ChannelInboundHandlerAdapter.java:86)  
> > > at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:362)  
> > > at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:348)  
> > > at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:340)  
> > > at io.netty.handler.ssl.SslHandler.unwrap(SslHandler.java:1267  
> > > at io.netty.handler.ssl.SslHandler.decode(SslHandler.java:1078)  
> > > at io.netty.handler.codec.ByteToMessageDecoder.decodeRemovalReentryProtection(ByteToMessageDecoder.java:489)  
> > > at io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:428)  
> > > at io.netty.handler.codec.ByteToMessageDecoder.channelRead(ByteToMessageDecoder.java:265)  
> > > at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:362)  
> > > at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:348)  
> > > at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:340)  
> > > at io.netty.channel.DefaultChannelPipeline$HeadContext.channelRead(DefaultChannelPipeline.java:1334)  
> > > at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:362)  
> > > at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:348)  
> > > at io.netty.channel.DefaultChannelPipeline.fireChannelRead(DefaultChannelPipeline.java:926)  
> > > at io.netty.channel.nio.AbstractNioByteChannel$NioByteUnsafe.read(AbstractNioByteChannel.java:134)  
> > > at io.netty.channel.nio.NioEventLoop.processSelectedKey(NioEventLoop.java:644)  
> > > at io.netty.channel.nio.NioEventLoop.processSelectedKeysPlain(NioEventLoop.java:544)  
> > > at io.netty.channel.nio.NioEventLoop.processSelectedKeys(NioEventLoop.java:498)  
> > > at io.netty.channel.nio.NioEventLoop.run(NioEventLoop.java:458)  
> > > at io.netty.util.concurrent.SingleThreadEventExecutor$5.run(SingleThreadEventExecutor.java:858)  
> > > at java.lang.Thread.run(Thread.java:748)
> 
> > here are the relevant entries in elasticsearch.yml
> 
> > > searchguard.ssl.transport.enabled: true  
> > > searchguard.ssl.transport.keystore\_filepath: keystore.jks  
> > > searchguard.ssl.transport.keystore\_password: changeit  
> > > searchguard.ssl.transport.truststore\_filepath: truststore.jks  
> > > searchguard.ssl.transport.truststore\_password: changeit  
> > > searchguard.ssl.transport.enforce\_hostname\_verification: false  
> > > searchguard.ssl.http.enabled: true  
> > > searchguard.ssl.http.keystore\_filepath: keystore.jks  
> > > searchguard.ssl.http.keystore\_password: changeit  
> > > searchguard.ssl.http.truststore\_filepath: truststore.jks  
> > > searchguard.ssl.http.truststore\_password: changeit  
> > > searchguard.nodes\_dn:
> > > 
> > > - ‘\*’  
> > > searchguard.authcz.admin\_dn:
> > > - “CN=\*.[mydomain.com](http://mydomain.com),OU=,O=MyCompany,L=Los Angeles,C=US”
> 
> > Anyone know how to fix this or get more information?
> 
> > 
> 
> > Thanks!
> 
> > Frank

---

<div class="post-metadata">

**Author:** ![searchguard\_google\_group](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/searchguard_google_group/32/462_2.png) [@searchguard\_google\_group](https://forum.search-guard.com/u/searchguard_google_group)\
**Post date:** [August 16, 2017, 7:22pm UTC](https://forum.search-guard.com/t/search-guard-not-initialized-sg11-for-indices-admin-exists-for-sgadmin/567/3 "2017-08-16T19:22:15Z")

</div>

Seem you try to connect with a node certificate instead of an client admin cert

See [https://github.com/floragunncom/search-guard/issues/366](https://github.com/floragunncom/search-guard/issues/366) and [https://github.com/floragunncom/search-guard-docs/blob/master/sgadmin.md](https://github.com/floragunncom/search-guard-docs/blob/master/sgadmin.md)

> **···**
>
> On Wednesday, 16 August 2017 19:53:32 UTC+2, Frank Maritato wrote:
> 
> > Hi,
> 
> > I am running ES 5.5.1 and I have search-guard-5:5.5.1-15 plugin installed. We have a wildcard certificate that I’m trying to get installed in SearchGuard.
> 
> > I’m running this command:
> 
> > > ./sgadmin.sh -ts /etc/elasticsearch/truststore.jks -tspass changeit -ks /etc/elasticsearch/keystore.jks -kspass changeit -cn es -nhnv -cd …/sgconfig -h [es-host.mydomain.com](http://es-host.mydomain.com)
> > 
> > and getting this error:
> > 
> > > ERR: An unexpected ElasticsearchSecurityException occured: Search Guard not initialized (SG11) for indices:admin/exists. See [https://github.com/floragunncom/search-guard-docs/blob/master/sgadmin.md](https://github.com/floragunncom/search-guard-docs/blob/master/sgadmin.md)
> > > 
> > > Trace:
> > > 
> > > ElasticsearchSecurityException[Search Guard not initialized (SG11) for indices:admin/exists. See [https://github.com/floragunncom/search-guard-docs/blob/master/sgadmin.md](https://github.com/floragunncom/search-guard-docs/blob/master/sgadmin.md)]  
> > > at com.floragunn.searchguard.filter.SearchGuardFilter.apply(SearchGuardFilter.java:128)  
> > > at org.elasticsearch.action.support.TransportAction$RequestFilterChain.proceed(TransportAction.java:168)  
> > > at org.elasticsearch.action.support.TransportAction.execute(TransportAction.java:142)  
> > > at org.elasticsearch.action.support.HandledTransportAction$TransportHandler.messageReceived(HandledTransportAction.java:64)  
> > > at org.elasticsearch.action.support.HandledTransportAction$TransportHandler.messageReceived(HandledTransportAction.java:54)  
> > > at com.floragunn.searchguard.ssl.transport.SearchGuardSSLRequestHandler.messageReceivedDecorate(SearchGuardSSLRequestHandler.java:178)  
> > > at com.floragunn.searchguard.transport.SearchGuardRequestHandler.messageReceivedDecorate(SearchGuardRequestHandler.java:192)  
> > > at com.floragunn.searchguard.ssl.transport.SearchGuardSSLRequestHandler.messageReceived(SearchGuardSSLRequestHandler.java:140)  
> > > at com.floragunn.searchguard.SearchGuardPlugin$3$1.messageReceived(SearchGuardPlugin.java:376)  
> > > at org.elasticsearch.transport.RequestHandlerRegistry.processMessageReceived(RequestHandlerRegistry.java:69)  
> > > at org.elasticsearch.transport.TcpTransport$RequestHandler.doRun(TcpTransport.java:1544)  
> > > at org.elasticsearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java:37)  
> > > at org.elasticsearch.common.util.concurrent.EsExecutors$1.execute(EsExecutors.java:110)  
> > > at org.elasticsearch.transport.TcpTransport.handleRequest(TcpTransport.java:1501)  
> > > at org.elasticsearch.transport.TcpTransport.messageReceived(TcpTransport.java:1385)  
> > > at org.elasticsearch.transport.netty4.Netty4MessageChannelHandler.channelRead(Netty4MessageChannelHandler.java:74)  
> > > at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:362)  
> > > at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:348)  
> > > at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:340)  
> > > at io.netty.handler.codec.ByteToMessageDecoder.fireChannelRead(ByteToMessageDecoder.java:310)  
> > > at io.netty.handler.codec.ByteToMessageDecoder.fireChannelRead(ByteToMessageDecoder.java:297)  
> > > at io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:413)  
> > > at io.netty.handler.codec.ByteToMessageDecoder.channelRead(ByteToMessageDecoder.java:265)  
> > > at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:362)  
> > > at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:348)  
> > > at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:340)  
> > > at io.netty.channel.ChannelInboundHandlerAdapter.channelRead(ChannelInboundHandlerAdapter.java:86)  
> > > at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:362)  
> > > at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:348)  
> > > at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:340)  
> > > at io.netty.handler.ssl.SslHandler.unwrap(SslHandler.java:1267  
> > > at io.netty.handler.ssl.SslHandler.decode(SslHandler.java:1078)  
> > > at io.netty.handler.codec.ByteToMessageDecoder.decodeRemovalReentryProtection(ByteToMessageDecoder.java:489)  
> > > at io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:428)  
> > > at io.netty.handler.codec.ByteToMessageDecoder.channelRead(ByteToMessageDecoder.java:265)  
> > > at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:362)  
> > > at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:348)  
> > > at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:340)  
> > > at io.netty.channel.DefaultChannelPipeline$HeadContext.channelRead(DefaultChannelPipeline.java:1334)  
> > > at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:362)  
> > > at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:348)  
> > > at io.netty.channel.DefaultChannelPipeline.fireChannelRead(DefaultChannelPipeline.java:926)  
> > > at io.netty.channel.nio.AbstractNioByteChannel$NioByteUnsafe.read(AbstractNioByteChannel.java:134)  
> > > at io.netty.channel.nio.NioEventLoop.processSelectedKey(NioEventLoop.java:644)  
> > > at io.netty.channel.nio.NioEventLoop.processSelectedKeysPlain(NioEventLoop.java:544)  
> > > at io.netty.channel.nio.NioEventLoop.processSelectedKeys(NioEventLoop.java:498)  
> > > at io.netty.channel.nio.NioEventLoop.run(NioEventLoop.java:458)  
> > > at io.netty.util.concurrent.SingleThreadEventExecutor$5.run(SingleThreadEventExecutor.java:858)  
> > > at java.lang.Thread.run(Thread.java:748)
> 
> > here are the relevant entries in elasticsearch.yml
> 
> > > searchguard.ssl.transport.enabled: true  
> > > searchguard.ssl.transport.keystore\_filepath: keystore.jks  
> > > searchguard.ssl.transport.keystore\_password: changeit  
> > > searchguard.ssl.transport.truststore\_filepath: truststore.jks  
> > > searchguard.ssl.transport.truststore\_password: changeit  
> > > searchguard.ssl.transport.enforce\_hostname\_verification: false  
> > > searchguard.ssl.http.enabled: true  
> > > searchguard.ssl.http.keystore\_filepath: keystore.jks  
> > > searchguard.ssl.http.keystore\_password: changeit  
> > > searchguard.ssl.http.truststore\_filepath: truststore.jks  
> > > searchguard.ssl.http.truststore\_password: changeit  
> > > searchguard.nodes\_dn:
> > > 
> > > - ‘\*’  
> > > searchguard.authcz.admin\_dn:
> > > - “CN=\*.[mydomain.com](http://mydomain.com),OU=,O=MyCompany,L=Los Angeles,C=US”
> 
> > Anyone know how to fix this or get more information?
> 
> > 
> 
> > Thanks!
> 
> > Frank