# Search guard not intialised

**URL:** <https://forum.search-guard.com/t/search-guard-not-intialised/305>\
**Category:** Search Guard\
**Created:** [October 19, 2016, 2:09pm UTC](https://forum.search-guard.com/t/search-guard-not-intialised/305 "2016-10-19T14:09:52Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Rajat\_Singh](https://avatars.discourse-cdn.com/v4/letter/r/cab0a1/32.png) [@Rajat\_Singh](https://forum.search-guard.com/u/Rajat_Singh)\
**Post date:** [October 19, 2016, 2:09pm UTC](https://forum.search-guard.com/t/search-guard-not-intialised/305/1 "2016-10-19T14:09:52Z")

</div>

my elasticsearch.yml file is

# ======================== Elasticsearch Configuration =========================

> **···**
>
> # 
> 
> # NOTE: Elasticsearch comes with reasonable defaults for most settings.
> 
> # Before you set out to tweak and tune the configuration, make sure you
> 
> # understand what are you trying to accomplish and the consequences.
> 
> # 
> 
> # The primary way of configuring a node is via this file. This template lists
> 
> # the most important settings you may want to configure for a production cluster.
> 
> # 
> 
> # Please see the documentation for further information on configuration options:
> 
> # [http://www.elastic.co/guide/en/elasticsearch/reference/current/setup-configuration.html](http://www.elastic.co/guide/en/elasticsearch/reference/current/setup-configuration.html)
> 
> # 
> 
> # ---------------------------------- Cluster -----------------------------------
> 
> # 
> 
> # Use a descriptive name for your cluster:
> 
> # 
> 
> #cluster.name: mycluster1
> 
> #cluster.name: mycluster1
> 
> # 
> 
> # ------------------------------------ Node ------------------------------------
> 
> # 
> 
> # Use a descriptive name for the node:
> 
> # 
> 
> # node.name: node-1
> 
> #node.name: node0
> 
> # 
> 
> # Add custom attributes to the node:
> 
> # 
> 
> # node.rack: r1
> 
> # 
> 
> # ----------------------------------- Paths ------------------------------------
> 
> # 
> 
> # Path to directory where to store the data (separate multiple locations by comma):
> 
> # 
> 
> # path.data: /path/to/data
> 
> # 
> 
> # Path to log files:
> 
> # 
> 
> # path.logs: /path/to/logs
> 
> # 
> 
> # ----------------------------------- Memory -----------------------------------
> 
> # 
> 
> # Lock the memory on startup:
> 
> # 
> 
> # bootstrap.memory\_lock: true
> 
> # 
> 
> # Make sure that the `ES_HEAP_SIZE` environment variable is set to about half the memory
> 
> # available on the system and that the owner of the process is allowed to use this limit.
> 
> # 
> 
> # Elasticsearch performs poorly when the system is swapping the memory.
> 
> ## ---------------------------------- Network -----------------------------------
> 
> # 
> 
> # Set the bind address to a specific IP (IPv4 or IPv6):
> 
> # 
> 
> # network.host: 192.168.0.1
> 
> network.host: 10.150.86.177
> 
> # 
> 
> # Set a custom port for HTTP:
> 
> # 
> 
> # http.port: 9200
> 
> # 
> 
> # For more information, see the documentation at:
> 
> # [http://www.elastic.co/guide/en/elasticsearch/reference/current/modules-network.html](http://www.elastic.co/guide/en/elasticsearch/reference/current/modules-network.html)
> 
> # 
> 
> # --------------------------------- Discovery ----------------------------------
> 
> # 
> 
> # Pass an initial list of hosts to perform discovery when new node is started:
> 
> # The default list of hosts is [“127.0.0.1”, “[::1]”]
> 
> # 
> 
> # discovery.zen.ping.unicast.hosts: [“host1”, “host2”]
> 
> # 
> 
> # Prevent the “split brain” by configuring the majority of nodes (total number of nodes / 2 + 1):
> 
> # 
> 
> # discovery.zen.minimum\_master\_nodes: 3
> 
> # 
> 
> # For more information, see the documentation at:
> 
> # [http://www.elastic.co/guide/en/elasticsearch/reference/current/modules-discovery.html](http://www.elastic.co/guide/en/elasticsearch/reference/current/modules-discovery.html)
> 
> # 
> 
> # ---------------------------------- Gateway -----------------------------------
> 
> # 
> 
> # Block initial recovery after a full cluster restart until N nodes are started:
> 
> # 
> 
> # gateway.recover\_after\_nodes: 3
> 
> # 
> 
> # For more information, see the documentation at:
> 
> # [http://www.elastic.co/guide/en/elasticsearch/reference/current/modules-gateway.html](http://www.elastic.co/guide/en/elasticsearch/reference/current/modules-gateway.html)
> 
> # 
> 
> # ---------------------------------- Various -----------------------------------
> 
> # 
> 
> # Disable starting multiple nodes on a single system:
> 
> # 
> 
> # node.max\_local\_storage\_nodes: 1
> 
> # 
> 
> # Require explicit names when deleting indices:
> 
> # 
> 
> # action.destructive\_requires\_name: true
> 
> searchguard.ssl.transport.keystore\_filepath: node-0-keystore.jks
> 
> searchguard.ssl.transport.keystore\_password: changeit
> 
> searchguard.ssl.transport.truststore\_filepath: truststore.jks
> 
> searchguard.ssl.transport.truststore\_password: changeit
> 
> searchguard.ssl.transport.enforce\_hostname\_verification: false
> 
> #searchguard.authcz.admin\_dn:
> 
> and the logs files of elastic search are
> 
> while running the command
> 
> ```auto
> ./sgadmin.sh -ts truststore.jks -ks kirk-keystore.jks -cd ../sgconfig -icl
> 
> ```
> 
> ```auto
> logs files generate the following error for this
> 
> ```
> 
> ```auto
> [2016-10-19 17:54:52,213][ERROR][com.floragunn.searchguard.ssl.transport.SearchGuardSSLNettyTransport] [J2] SSL Problem Received fatal alert: certificate_unknown
> javax.net.ssl.SSLException: Received fatal alert: certificate_unknown
> at sun.security.ssl.Alerts.getSSLException(Alerts.java:208)
> at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1666)
> at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1634)
> at sun.security.ssl.SSLEngineImpl.recvAlert(SSLEngineImpl.java:1800)
> at sun.security.ssl.SSLEngineImpl.readRecord(SSLEngineImpl.java:1083)
> at sun.security.ssl.SSLEngineImpl.readNetRecord(SSLEngineImpl.java:907)
> at sun.security.ssl.SSLEngineImpl.unwrap(SSLEngineImpl.java:781)
> at javax.net.ssl.SSLEngine.unwrap(SSLEngine.java:624)
> at org.jboss.netty.handler.ssl.SslHandler.unwrap(SslHandler.java:1219)
> at org.jboss.netty.handler.ssl.SslHandler.decode(SslHandler.java:852)
> at org.jboss.netty.handler.codec.frame.FrameDecoder.callDecode(FrameDecoder.java:425)
> at org.jboss.netty.handler.codec.frame.FrameDecoder.messageReceived(FrameDecoder.java:303)
> at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:70)
> at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564)
> at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:559)
> at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:268)
> at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:255)
> at org.jboss.netty.channel.socket.nio.NioWorker.read(NioWorker.java:88)
> at org.jboss.netty.channel.socket.nio.AbstractNioWorker.process(AbstractNioWorker.java:108)
> at org.jboss.netty.channel.socket.nio.AbstractNioSelector.run(AbstractNioSelector.java:337)
> at org.jboss.netty.channel.socket.nio.AbstractNioWorker.run(AbstractNioWorker.java:89)
> at org.jboss.netty.channel.socket.nio.NioWorker.run(NioWorker.java:178)
> at org.jboss.netty.util.ThreadRenamingRunnable.run(ThreadRenamingRunnable.java:108)
> at org.jboss.netty.util.internal.DeadLockProofWorker$1.run(DeadLockProofWorker.java:42)
> at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
> at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
> at java.lang.Thread.run(Thread.java:745)
> [2016-10-19 17:54:57,076][ERROR][com.floragunn.searchguard.ssl.transport.SearchGuardSSLNettyTransport] [J2] SSL Problem Received fatal alert: certificate_unknown
> javax.net.ssl.SSLException: Received fatal alert: certificate_unknown
> at sun.security.ssl.Alerts.getSSLException(Alerts.java:208)
> at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1666)
> at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1634)
> at sun.security.ssl.SSLEngineImpl.recvAlert(SSLEngineImpl.java:1800)
> at sun.security.ssl.SSLEngineImpl.readRecord(SSLEngineImpl.java:1083)
> at sun.security.ssl.SSLEngineImpl.readNetRecord(SSLEngineImpl.java:907)
> at sun.security.ssl.SSLEngineImpl.unwrap(SSLEngineImpl.java:781)
> at javax.net.ssl.SSLEngine.unwrap(SSLEngine.java:624)
> at org.jboss.netty.handler.ssl.SslHandler.unwrap(SslHandler.java:1219)
> at org.jboss.netty.handler.ssl.SslHandler.decode(SslHandler.java:852)
> at org.jboss.netty.handler.codec.frame.FrameDecoder.callDecode(FrameDecoder.java:425)
> at org.jboss.netty.handler.codec.frame.FrameDecoder.messageReceived(FrameDecoder.java:303)
> at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:70)
> at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564)
> at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:559)
> at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:268)
> at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:255)
> at org.jboss.netty.channel.socket.nio.NioWorker.read(NioWorker.java:88)
> at org.jboss.netty.channel.socket.nio.AbstractNioWorker.process(AbstractNioWorker.java:108)
> at org.jboss.netty.channel.socket.nio.AbstractNioSelector.run(AbstractNioSelector.java:337)
> at org.jboss.netty.channel.socket.nio.AbstractNioWorker.run(AbstractNioWorker.java:89)
> at org.jboss.netty.channel.socket.nio.NioWorker.run(NioWorker.java:178)
> at org.jboss.netty.util.ThreadRenamingRunnable.run(ThreadRenamingRunnable.java:108)
> at org.jboss.netty.util.internal.DeadLockProofWorker$1.run(DeadLockProofWorker.java:42)
> at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
> at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
> at java.lang.Thread.run(Thread.java:745)
> [2016-10-19 17:55:02,118][ERROR][com.floragunn.searchguard.ssl.transport.SearchGuardSSLNettyTransport] [J2] SSL Problem Received fatal alert: certificate_unknown
> javax.net.ssl.SSLException: Received fatal alert: certificate_unknown
> at sun.security.ssl.Alerts.getSSLException(Alerts.java:208)
> at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1666)
> at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1634)
> at sun.security.ssl.SSLEngineImpl.recvAlert(SSLEngineImpl.java:1800)
> at sun.security.ssl.SSLEngineImpl.readRecord(SSLEngineImpl.java:1083)
> at sun.security.ssl.SSLEngineImpl.readNetRecord(SSLEngineImpl.java:907)
> at sun.security.ssl.SSLEngineImpl.unwrap(SSLEngineImpl.java:781)
> at javax.net.ssl.SSLEngine.unwrap(SSLEngine.java:624)
> at org.jboss.netty.handler.ssl.SslHandler.unwrap(SslHandler.java:1219)
> at org.jboss.netty.handler.ssl.SslHandler.decode(SslHandler.java:852)
> at org.jboss.netty.handler.codec.frame.FrameDecoder.callDecode(FrameDecoder.java:425)
> at org.jboss.netty.handler.codec.frame.FrameDecoder.messageReceived(FrameDecoder.java:303)
> at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:70)
> at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564)
> at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:559)
> at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:268)
> at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:255)
> at org.jboss.netty.channel.socket.nio.NioWorker.read(NioWorker.java:88)
> at org.jboss.netty.channel.socket.nio.AbstractNioWorker.process(AbstractNioWorker.java:108)
> at org.jboss.netty.channel.socket.nio.AbstractNioSelector.run(AbstractNioSelector.java:337)
> at org.jboss.netty.channel.socket.nio.AbstractNioWorker.run(AbstractNioWorker.java:89)
> at org.jboss.netty.channel.socket.nio.NioWorker.run(NioWorker.java:178)
> at org.jboss.netty.util.ThreadRenamingRunnable.run(ThreadRenamingRunnable.java:108)
> at org.jboss.netty.util.internal.DeadLockProofWorker$1.run(DeadLockProofWorker.java:42)
> at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
> at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
> at java.lang.Thread.run(Thread.java:745)
> [2016-10-19 17:55:07,155][ERROR][com.floragunn.searchguard.ssl.transport.SearchGuardSSLNettyTransport] [J2] SSL Problem Received fatal alert: certificate_unknown
> javax.net.ssl.SSLException: Received fatal alert: certificate_unknown
> at sun.security.ssl.Alerts.getSSLException(Alerts.java:208)
> at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1666)
> at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1634)
> at sun.security.ssl.SSLEngineImpl.recvAlert(SSLEngineImpl.java:1800)
> at sun.security.ssl.SSLEngineImpl.readRecord(SSLEngineImpl.java:1083)
> at sun.security.ssl.SSLEngineImpl.readNetRecord(SSLEngineImpl.java:907)
> at sun.security.ssl.SSLEngineImpl.unwrap(SSLEngineImpl.java:781)
> at javax.net.ssl.SSLEngine.unwrap(SSLEngine.java:624)
> at org.jboss.netty.handler.ssl.SslHandler.unwrap(SslHandler.java:1219)
> at org.jboss.netty.handler.ssl.SslHandler.decode(SslHandler.java:852)
> at org.jboss.netty.handler.codec.frame.FrameDecoder.callDecode(FrameDecoder.java:425)
> at org.jboss.netty.handler.codec.frame.FrameDecoder.messageReceived(FrameDecoder.java:303)
> at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:70)
> at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564)
> at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:559)
> at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:268)
> at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:255)
> at org.jboss.netty.channel.socket.nio.NioWorker.read(NioWorker.java:88)
> at org.jboss.netty.channel.socket.nio.AbstractNioWorker.process(AbstractNioWorker.java:108)
> at org.jboss.netty.channel.socket.nio.AbstractNioSelector.run(AbstractNioSelector.java:337)
> at org.jboss.netty.channel.socket.nio.AbstractNioWorker.run(AbstractNioWorker.java:89)
> at org.jboss.netty.channel.socket.nio.NioWorker.run(NioWorker.java:178)
> at org.jboss.netty.util.ThreadRenamingRunnable.run(ThreadRenamingRunnable.java:108)
> at org.jboss.netty.util.internal.DeadLockProofWorker$1.run(DeadLockProofWorker.java:42)
> at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
> at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
> at java.lang.Thread.run(Thread.java:745)
> [2016-10-19 17:57:20,447][ERROR][com.floragunn.searchguard.ssl.transport.SearchGuardSSLNettyTransport] [J2] SSL Problem Received fatal alert: certificate_unknown
> javax.net.ssl.SSLException: Received fatal alert: certificate_unknown
> at sun.security.ssl.Alerts.getSSLException(Alerts.java:208)
> at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1666)
> at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1634)
> at sun.security.ssl.SSLEngineImpl.recvAlert(SSLEngineImpl.java:1800)
> at sun.security.ssl.SSLEngineImpl.readRecord(SSLEngineImpl.java:1083)
> at sun.security.ssl.SSLEngineImpl.readNetRecord(SSLEngineImpl.java:907)
> at sun.security.ssl.SSLEngineImpl.unwrap(SSLEngineImpl.java:781)
> at javax.net.ssl.SSLEngine.unwrap(SSLEngine.java:624)
> at org.jboss.netty.handler.ssl.SslHandler.unwrap(SslHandler.java:1219)
> at org.jboss.netty.handler.ssl.SslHandler.decode(SslHandler.java:852)
> at org.jboss.netty.handler.codec.frame.FrameDecoder.callDecode(FrameDecoder.java:425)
> at org.jboss.netty.handler.codec.frame.FrameDecoder.messageReceived(FrameDecoder.java:303)
> at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:70)
> at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564)
> at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:559)
> at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:268)
> at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:255)
> at org.jboss.netty.channel.socket.nio.NioWorker.read(NioWorker.java:88)
> at org.jboss.netty.channel.socket.nio.AbstractNioWorker.process(AbstractNioWorker.java:108)
> at org.jboss.netty.channel.socket.nio.AbstractNioSelector.run(AbstractNioSelector.java:337)
> at org.jboss.netty.channel.socket.nio.AbstractNioWorker.run(AbstractNioWorker.java:89)
> at org.jboss.netty.channel.socket.nio.NioWorker.run(NioWorker.java:178)
> at org.jboss.netty.util.ThreadRenamingRunnable.run(ThreadRenamingRunnable.java:108)
> at org.jboss.netty.util.internal.DeadLockProofWorker$1.run(DeadLockProofWorker.java:42)
> at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
> at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
> at java.lang.Thread.run(Thread.java:745)
> [2016-10-19 17:57:25,342][ERROR][com.floragunn.searchguard.ssl.transport.SearchGuardSSLNettyTransport] [J2] SSL Problem Received fatal alert: certificate_unknown
> javax.net.ssl.SSLException: Received fatal alert: certificate_unknown
> at sun.security.ssl.Alerts.getSSLException(Alerts.java:208)
> at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1666)
> at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1634)
> at sun.security.ssl.SSLEngineImpl.recvAlert(SSLEngineImpl.java:1800)
> at sun.security.ssl.SSLEngineImpl.readRecord(SSLEngineImpl.java:1083)
> at sun.security.ssl.SSLEngineImpl.readNetRecord(SSLEngineImpl.java:907)
> at sun.security.ssl.SSLEngineImpl.unwrap(SSLEngineImpl.java:781)
> at javax.net.ssl.SSLEngine.unwrap(SSLEngine.java:624)
> at org.jboss.netty.handler.ssl.SslHandler.unwrap(SslHandler.java:1219)
> at org.jboss.netty.handler.ssl.SslHandler.decode(SslHandler.java:852)
> at org.jboss.netty.handler.codec.frame.FrameDecoder.callDecode(FrameDecoder.java:425)
> at org.jboss.netty.handler.codec.frame.FrameDecoder.messageReceived(FrameDecoder.java:303)
> at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:70)
> at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564)
> at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:559)
> at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:268)
> at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:255)
> at org.jboss.netty.channel.socket.nio.NioWorker.read(NioWorker.java:88)
> at org.jboss.netty.channel.socket.nio.AbstractNioWorker.process(AbstractNioWorker.java:108)
> at org.jboss.netty.channel.socket.nio.AbstractNioSelector.run(AbstractNioSelector.java:337)
> at org.jboss.netty.channel.socket.nio.AbstractNioWorker.run(AbstractNioWorker.java:89)
> at org.jboss.netty.channel.socket.nio.NioWorker.run(NioWorker.java:178)
> at org.jboss.netty.util.ThreadRenamingRunnable.run(ThreadRenamingRunnable.java:108)
> at org.jboss.netty.util.internal.DeadLockProofWorker$1.run(DeadLockProofWorker.java:42)
> at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
> at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
> at java.lang.Thread.run(Thread.java:745)
> [2016-10-19 17:57:30,384][ERROR][com.floragunn.searchguard.ssl.transport.SearchGuardSSLNettyTransport] [J2] SSL Problem Received fatal alert: certificate_unknown
> javax.net.ssl.SSLException: Received fatal alert: certificate_unknown
> at sun.security.ssl.Alerts.getSSLException(Alerts.java:208)
> at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1666)
> at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1634)
> at sun.security.ssl.SSLEngineImpl.recvAlert(SSLEngineImpl.java:1800)
> at sun.security.ssl.SSLEngineImpl.readRecord(SSLEngineImpl.java:1083)
> at sun.security.ssl.SSLEngineImpl.readNetRecord(SSLEngineImpl.java:907)
> at sun.security.ssl.SSLEngineImpl.unwrap(SSLEngineImpl.java:781)
> at javax.net.ssl.SSLEngine.unwrap(SSLEngine.java:624)
> at org.jboss.netty.handler.ssl.SslHandler.unwrap(SslHandler.java:1219)
> at org.jboss.netty.handler.ssl.SslHandler.decode(SslHandler.java:852)
> at org.jboss.netty.handler.codec.frame.FrameDecoder.callDecode(FrameDecoder.java:425)
> at org.jboss.netty.handler.codec.frame.FrameDecoder.messageReceived(FrameDecoder.java:303)
> at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:70)
> at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564)
> at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:559)
> at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:268)
> at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:255)
> at org.jboss.netty.channel.socket.nio.NioWorker.read(NioWorker.java:88)
> at org.jboss.netty.channel.socket.nio.AbstractNioWorker.process(AbstractNioWorker.java:108)
> at org.jboss.netty.channel.socket.nio.AbstractNioSelector.run(AbstractNioSelector.java:337)
> at org.jboss.netty.channel.socket.nio.AbstractNioWorker.run(AbstractNioWorker.java:89)
> at org.jboss.netty.channel.socket.nio.NioWorker.run(NioWorker.java:178)
> at org.jboss.netty.util.ThreadRenamingRunnable.run(ThreadRenamingRunnable.java:108)
> at org.jboss.netty.util.internal.DeadLockProofWorker$1.run(DeadLockProofWorker.java:42)
> at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
> at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
> at java.lang.Thread.run(Thread.java:745)
> [2016-10-19 17:57:35,420][ERROR][com.floragunn.searchguard.ssl.transport.SearchGuardSSLNettyTransport] [J2] SSL Problem Received fatal alert: certificate_unknown
> javax.net.ssl.SSLException: Received fatal alert: certificate_unknown
> at sun.security.ssl.Alerts.getSSLException(Alerts.java:208)
> at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1666)
> at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1634)
> at sun.security.ssl.SSLEngineImpl.recvAlert(SSLEngineImpl.java:1800)
> at sun.security.ssl.SSLEngineImpl.readRecord(SSLEngineImpl.java:1083)
> at sun.security.ssl.SSLEngineImpl.readNetRecord(SSLEngineImpl.java:907)
> at sun.security.ssl.SSLEngineImpl.unwrap(SSLEngineImpl.java:781)
> at javax.net.ssl.SSLEngine.unwrap(SSLEngine.java:624)
> at org.jboss.netty.handler.ssl.SslHandler.unwrap(SslHandler.java:1219)
> at org.jboss.netty.handler.ssl.SslHandler.decode(SslHandler.java:852)
> at org.jboss.netty.handler.codec.frame.FrameDecoder.callDecode(FrameDecoder.java:425)
> at org.jboss.netty.handler.codec.frame.FrameDecoder.messageReceived(FrameDecoder.java:303)
> at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:70)
> at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564)
> at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:559)
> at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:268)
> at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:255)
> at org.jboss.netty.channel.socket.nio.NioWorker.read(NioWorker.java:88)
> at org.jboss.netty.channel.socket.nio.AbstractNioWorker.process(AbstractNioWorker.java:108)
> at org.jboss.netty.channel.socket.nio.AbstractNioSelector.run(AbstractNioSelector.java:337)
> at org.jboss.netty.channel.socket.nio.AbstractNioWorker.run(AbstractNioWorker.java:89)
> at org.jboss.netty.channel.socket.nio.NioWorker.run(NioWorker.java:178)
> at org.jboss.netty.util.ThreadRenamingRunnable.run(ThreadRenamingRunnable.java:108)
> at org.jboss.netty.util.internal.DeadLockProofWorker$1.run(DeadLockProofWorker.java:42)
> at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
> at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
> at java.lang.Thread.run(Thread.java:745)
> [2016-10-19 17:57:40,456][ERROR][com.floragunn.searchguard.ssl.transport.SearchGuardSSLNettyTransport] [J2] SSL Problem Received fatal alert: certificate_unknown
> javax.net.ssl.SSLException: Received fatal alert: certificate_unknown
> at sun.security.ssl.Alerts.getSSLException(Alerts.java:208)
> at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1666)
> at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1634)
> at sun.security.ssl.SSLEngineImpl.recvAlert(SSLEngineImpl.java:1800)
> at sun.security.ssl.SSLEngineImpl.readRecord(SSLEngineImpl.java:1083)
> at sun.security.ssl.SSLEngineImpl.readNetRecord(SSLEngineImpl.java:907)
> at sun.security.ssl.SSLEngineImpl.unwrap(SSLEngineImpl.java:781)
> at javax.net.ssl.SSLEngine.unwrap(SSLEngine.java:624)
> at org.jboss.netty.handler.ssl.SslHandler.unwrap(SslHandler.java:1219)
> at org.jboss.netty.handler.ssl.SslHandler.decode(SslHandler.java:852)
> at org.jboss.netty.handler.codec.frame.FrameDecoder.callDecode(FrameDecoder.java:425)
> at org.jboss.netty.handler.codec.frame.FrameDecoder.messageReceived(FrameDecoder.java:303)
> at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:70)
> at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564)
> at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:559)
> at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:268)
> at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:255)
> at org.jboss.netty.channel.socket.nio.NioWorker.read(NioWorker.java:88)
> at org.jboss.netty.channel.socket.nio.AbstractNioWorker.process(AbstractNioWorker.java:108)
> at org.jboss.netty.channel.socket.nio.AbstractNioSelector.run(AbstractNioSelector.java:337)
> at org.jboss.netty.channel.socket.nio.AbstractNioWorker.run(AbstractNioWorker.java:89)
> at org.jboss.netty.channel.socket.nio.NioWorker.run(NioWorker.java:178)
> at org.jboss.netty.util.ThreadRenamingRunnable.run(ThreadRenamingRunnable.java:108)
> at org.jboss.netty.util.internal.DeadLockProofWorker$1.run(DeadLockProofWorker.java:42)
> at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
> at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
> at java.lang.Thread.run(Thread.java:745)
> [2016-10-19 17:57:45,487][ERROR][com.floragunn.searchguard.ssl.transport.SearchGuardSSLNettyTransport] [J2] SSL Problem Received fatal alert: certificate_unknown
> javax.net.ssl.SSLException: Received fatal alert: certificate_unknown
> at sun.security.ssl.Alerts.getSSLException(Alerts.java:208)
> at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1666)
> at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1634)
> at sun.security.ssl.SSLEngineImpl.recvAlert(SSLEngineImpl.java:1800)
> at sun.security.ssl.SSLEngineImpl.readRecord(SSLEngineImpl.java:1083)
> at sun.security.ssl.SSLEngineImpl.readNetRecord(SSLEngineImpl.java:907)
> at sun.security.ssl.SSLEngineImpl.unwrap(SSLEngineImpl.java:781)
> at javax.net.ssl.SSLEngine.unwrap(SSLEngine.java:624)
> at org.jboss.netty.handler.ssl.SslHandler.unwrap(SslHandler.java:1219)
> at org.jboss.netty.handler.ssl.SslHandler.decode(SslHandler.java:852)
> at org.jboss.netty.handler.codec.frame.FrameDecoder.callDecode(FrameDecoder.java:425)
> at org.jboss.netty.handler.codec.frame.FrameDecoder.messageReceived(FrameDecoder.java:303)
> at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:70)
> at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564)
> at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:559)
> at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:268)
> at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:255)
> at org.jboss.netty.channel.socket.nio.NioWorker.read(NioWorker.java:88)
> at org.jboss.netty.channel.socket.nio.AbstractNioWorker.process(AbstractNioWorker.java:108)
> at org.jboss.netty.channel.socket.nio.AbstractNioSelector.run(AbstractNioSelector.java:337)
> at org.jboss.netty.channel.socket.nio.AbstractNioWorker.run(AbstractNioWorker.java:89)
> at org.jboss.netty.channel.socket.nio.NioWorker.run(NioWorker.java:178)
> at org.jboss.netty.util.ThreadRenamingRunnable.run(ThreadRenamingRunnable.java:108)
> at org.jboss.netty.util.internal.DeadLockProofWorker$1.run(DeadLockProofWorker.java:42)
> at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
> at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
> at java.lang.Thread.run(Thread.java:745)
> [2016-10-19 17:57:50,516][ERROR][com.floragunn.searchguard.ssl.transport.SearchGuardSSLNettyTransport] [J2] SSL Problem Received fatal alert: certificate_unknown
> javax.net.ssl.SSLException: Received fatal alert: certificate_unknown
> at sun.security.ssl.Alerts.getSSLException(Alerts.java:208)
> at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1666)
> at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1634)
> at sun.security.ssl.SSLEngineImpl.recvAlert(SSLEngineImpl.java:1800)
> at sun.security.ssl.SSLEngineImpl.readRecord(SSLEngineImpl.java:1083)
> at sun.security.ssl.SSLEngineImpl.readNetRecord(SSLEngineImpl.java:907)
> at sun.security.ssl.SSLEngineImpl.unwrap(SSLEngineImpl.java:781)
> at javax.net.ssl.SSLEngine.unwrap(SSLEngine.java:624)
> at org.jboss.netty.handler.ssl.SslHandler.unwrap(SslHandler.java:1219)
> at org.jboss.netty.handler.ssl.SslHandler.decode(SslHandler.java:852)
> at org.jboss.netty.handler.codec.frame.FrameDecoder.callDecode(FrameDecoder.java:425)
> at org.jboss.netty.handler.codec.frame.FrameDecoder.messageReceived(FrameDecoder.java:303)
> at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:70)
> at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564)
> at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:559)
> at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:268)
> at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:255)
> at org.jboss.netty.channel.socket.nio.NioWorker.read(NioWorker.java:88)
> at org.jboss.netty.channel.socket.nio.AbstractNioWorker.process(AbstractNioWorker.java:108)
> at org.jboss.netty.channel.socket.nio.AbstractNioSelector.run(AbstractNioSelector.java:337)
> at org.jboss.netty.channel.socket.nio.AbstractNioWorker.run(AbstractNioWorker.java:89)
> at org.jboss.netty.channel.socket.nio.NioWorker.run(NioWorker.java:178)
> at org.jboss.netty.util.ThreadRenamingRunnable.run(ThreadRenamingRunnable.java:108)
> at org.jboss.netty.util.internal.DeadLockProofWorker$1.run(DeadLockProofWorker.java:42)
> at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
> at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
> at java.lang.Thread.run(Thread.java:745)
> [2016-10-19 17:57:55,548][ERROR][com.floragunn.searchguard.ssl.transport.SearchGuardSSLNettyTransport] [J2] SSL Problem Received fatal alert: certificate_unknown
> javax.net.ssl.SSLException: Received fatal alert: certificate_unknown
> at sun.security.ssl.Alerts.getSSLException(Alerts.java:208)
> at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1666)
> at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1634)
> at sun.security.ssl.SSLEngineImpl.recvAlert(SSLEngineImpl.java:1800)
> at sun.security.ssl.SSLEngineImpl.readRecord(SSLEngineImpl.java:1083)
> at sun.security.ssl.SSLEngineImpl.readNetRecord(SSLEngineImpl.java:907)
> at sun.security.ssl.SSLEngineImpl.unwrap(SSLEngineImpl.java:781)
> at javax.net.ssl.SSLEngine.unwrap(SSLEngine.java:624)
> at org.jboss.netty.handler.ssl.SslHandler.unwrap(SslHandler.java:1219)
> at org.jboss.netty.handler.ssl.SslHandler.decode(SslHandler.java:852)
> at org.jboss.netty.handler.codec.frame.FrameDecoder.callDecode(FrameDecoder.java:425)
> at org.jboss.netty.handler.codec.frame.FrameDecoder.messageReceived(FrameDecoder.java:303)
> at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:70)
> at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564)
> at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:559)
> at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:268)
> at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:255)
> at org.jboss.netty.channel.socket.nio.NioWorker.read(NioWorker.java:88)
> at org.jboss.netty.channel.socket.nio.AbstractNioWorker.process(AbstractNioWorker.java:108)
> at org.jboss.netty.channel.socket.nio.AbstractNioSelector.run(AbstractNioSelector.java:337)
> at org.jboss.netty.channel.socket.nio.AbstractNioWorker.run(AbstractNioWorker.java:89)
> at org.jboss.netty.channel.socket.nio.NioWorker.run(NioWorker.java:178)
> at org.jboss.netty.util.ThreadRenamingRunnable.run(ThreadRenamingRunnable.java:108)
> at org.jboss.netty.util.internal.DeadLockProofWorker$1.run(DeadLockProofWorker.java:42)
> at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
> at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
> at java.lang.Thread.run(Thread.java:745)
> [2016-10-19 17:58:00,582][ERROR][com.floragunn.searchguard.ssl.transport.SearchGuardSSLNettyTransport] [J2] SSL Problem Received fatal alert: certificate_unknown
> javax.net.ssl.SSLException: Received fatal alert: certificate_unknown
> at sun.security.ssl.Alerts.getSSLException(Alerts.java:208)
> at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1666)
> at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1634)
> at sun.security.ssl.SSLEngineImpl.recvAlert(SSLEngineImpl.java:1800)
> at sun.security.ssl.SSLEngineImpl.readRecord(SSLEngineImpl.java:1083)
> at sun.security.ssl.SSLEngineImpl.readNetRecord(SSLEngineImpl.java:907)
> at sun.security.ssl.SSLEngineImpl.unwrap(SSLEngineImpl.java:781)
> at javax.net.ssl.SSLEngine.unwrap(SSLEngine.java:624)
> at org.jboss.netty.handler.ssl.SslHandler.unwrap(SslHandler.java:1219)
> at org.jboss.netty.handler.ssl.SslHandler.decode(SslHandler.java:852)
> at org.jboss.netty.handler.codec.frame.FrameDecoder.callDecode(FrameDecoder.java:425)
> at org.jboss.netty.handler.codec.frame.FrameDecoder.messageReceived(FrameDecoder.java:303)
> at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:70)
> at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564)
> at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:559)
> at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:268)
> at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:255)
> at org.jboss.netty.channel.socket.nio.NioWorker.read(NioWorker.java:88)
> at org.jboss.netty.channel.socket.nio.AbstractNioWorker.process(AbstractNioWorker.java:108)
> at org.jboss.netty.channel.socket.nio.AbstractNioSelector.run(AbstractNioSelector.java:337)
> at org.jboss.netty.channel.socket.nio.AbstractNioWorker.run(AbstractNioWorker.java:89)
> at org.jboss.netty.channel.socket.nio.NioWorker.run(NioWorker.java:178)
> at org.jboss.netty.util.ThreadRenamingRunnable.run(ThreadRenamingRunnable.java:108)
> at org.jboss.netty.util.internal.DeadLockProofWorker$1.run(DeadLockProofWorker.java:42)
> at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
> at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
> at java.lang.Thread.run(Thread.java:745)
> [2016-10-19 17:58:05,614][ERROR][com.floragunn.searchguard.ssl.transport.SearchGuardSSLNettyTransport] [J2] SSL Problem Received fatal alert: certificate_unknown
> javax.net.ssl.SSLException: Received fatal alert: certificate_unknown
> at sun.security.ssl.Alerts.getSSLException(Alerts.java:208)
> at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1666)
> at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1634)
> at sun.security.ssl.SSLEngineImpl.recvAlert(SSLEngineImpl.java:1800)
> at sun.security.ssl.SSLEngineImpl.readRecord(SSLEngineImpl.java:1083)
> at sun.security.ssl.SSLEngineImpl.readNetRecord(SSLEngineImpl.java:907)
> at sun.security.ssl.SSLEngineImpl.unwrap(SSLEngineImpl.java:781)
> at javax.net.ssl.SSLEngine.unwrap(SSLEngine.java:624)
> at org.jboss.netty.handler.ssl.SslHandler.unwrap(SslHandler.java:1219)
> at org.jboss.netty.handler.ssl.SslHandler.decode(SslHandler.java:852)
> at org.jboss.netty.handler.codec.frame.FrameDecoder.callDecode(FrameDecoder.java:425)
> at org.jboss.netty.handler.codec.frame.FrameDecoder.messageReceived(FrameDecoder.java:303)
> at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:70)
> at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564)
> at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:559)
> at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:268)
> at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:255)
> at org.jboss.netty.channel.socket.nio.NioWorker.read(NioWorker.java:88)
> at org.jboss.netty.channel.socket.nio.AbstractNioWorker.process(AbstractNioWorker.java:108)
> at org.jboss.netty.channel.socket.nio.AbstractNioSelector.run(AbstractNioSelector.java:337)
> at org.jboss.netty.channel.socket.nio.AbstractNioWorker.run(AbstractNioWorker.java:89)
> at org.jboss.netty.channel.socket.nio.NioWorker.run(NioWorker.java:178)
> at org.jboss.netty.util.ThreadRenamingRunnable.run(ThreadRenamingRunnable.java:108)
> at org.jboss.netty.util.internal.DeadLockProofWorker$1.run(DeadLockProofWorker.java:42)
> at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
> at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
> at java.lang.Thread.run(Thread.java:745)
> [2016-10-19 17:58:10,648][ERROR][com.floragunn.searchguard.ssl.transport.SearchGuardSSLNettyTransport] [J2] SSL Problem Received fatal alert: certificate_unknown
> javax.net.ssl.SSLException: Received fatal alert: certificate_unknown
> at sun.security.ssl.Alerts.getSSLException(Alerts.java:208)
> at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1666)
> at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1634)
> at sun.security.ssl.SSLEngineImpl.recvAlert(SSLEngineImpl.java:1800)
> at sun.security.ssl.SSLEngineImpl.readRecord(SSLEngineImpl.java:1083)
> at sun.security.ssl.SSLEngineImpl.readNetRecord(SSLEngineImpl.java:907)
> at sun.security.ssl.SSLEngineImpl.unwrap(SSLEngineImpl.java:781)
> at javax.net.ssl.SSLEngine.unwrap(SSLEngine.java:624)
> at org.jboss.netty.handler.ssl.SslHandler.unwrap(SslHandler.java:1219)
> at org.jboss.netty.handler.ssl.SslHandler.decode(SslHandler.java:852)
> at org.jboss.netty.handler.codec.frame.FrameDecoder.callDecode(FrameDecoder.java:425)
> at org.jboss.netty.handler.codec.frame.FrameDecoder.messageReceived(FrameDecoder.java:303)
> at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:70)
> at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564)
> at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:559)
> at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:268)
> at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:255)
> at org.jboss.netty.channel.socket.nio.NioWorker.read(NioWorker.java:88)
> at org.jboss.netty.channel.socket.nio.AbstractNioWorker.process(AbstractNioWorker.java:108)
> at org.jboss.netty.channel.socket.nio.AbstractNioSelector.run(AbstractNioSelector.java:337)
> at org.jboss.netty.channel.socket.nio.AbstractNioWorker.run(AbstractNioWorker.java:89)
> at org.jboss.netty.channel.socket.nio.NioWorker.run(NioWorker.java:178)
> at org.jboss.netty.util.ThreadRenamingRunnable.run(ThreadRenamingRunnable.java:108)
> at org.jboss.netty.util.internal.DeadLockProofWorker$1.run(DeadLockProofWorker.java:42)
> at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
> at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
> at java.lang.Thread.run(Thread.java:745)
> [2016-10-19 18:04:08,932][ERROR][com.floragunn.searchguard.ssl.transport.SearchGuardSSLNettyTransport] [J2] SSL Problem Received fatal alert: certificate_unknown
> javax.net.ssl.SSLException: Received fatal alert: certificate_unknown
> at sun.security.ssl.Alerts.getSSLException(Alerts.java:208)
> at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1666)
> at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1634)
> at sun.security.ssl.SSLEngineImpl.recvAlert(SSLEngineImpl.java:1800)
> at sun.security.ssl.SSLEngineImpl.readRecord(SSLEngineImpl.java:1083)
> at sun.security.ssl.SSLEngineImpl.readNetRecord(SSLEngineImpl.java:907)
> at sun.security.ssl.SSLEngineImpl.unwrap(SSLEngineImpl.java:781)
> at javax.net.ssl.SSLEngine.unwrap(SSLEngine.java:624)
> at org.jboss.netty.handler.ssl.SslHandler.unwrap(SslHandler.java:1219)
> at org.jboss.netty.handler.ssl.SslHandler.decode(SslHandler.java:852)
> at org.jboss.netty.handler.codec.frame.FrameDecoder.callDecode(FrameDecoder.java:425)
> at org.jboss.netty.handler.codec.frame.FrameDecoder.messageReceived(FrameDecoder.java:303)
> at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:70)
> at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564)
> at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:559)
> at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:268)
> at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:255)
> at org.jboss.netty.channel.socket.nio.NioWorker.read(NioWorker.java:88)
> at org.jboss.netty.channel.socket.nio.AbstractNioWorker.process(AbstractNioWorker.java:108)
> at org.jboss.netty.channel.socket.nio.AbstractNioSelector.run(AbstractNioSelector.java:337)
> at org.jboss.netty.channel.socket.nio.AbstractNioWorker.run(AbstractNioWorker.java:89)
> at org.jboss.netty.channel.socket.nio.NioWorker.run(NioWorker.java:178)
> at org.jboss.netty.util.ThreadRenamingRunnable.run(ThreadRenamingRunnable.java:108)
> at org.jboss.netty.util.internal.DeadLockProofWorker$1.run(DeadLockProofWorker.java:42)
> at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
> at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
> at java.lang.Thread.run(Thread.java:745)
> [2016-10-19 18:04:13,840][ERROR][com.floragunn.searchguard.ssl.transport.SearchGuardSSLNettyTransport] [J2] SSL Problem Received fatal alert: certificate_unknown
> javax.net.ssl.SSLException: Received fatal alert: certificate_unknown
> at sun.security.ssl.Alerts.getSSLException(Alerts.java:208)
> at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1666)
> at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1634)
> at sun.security.ssl.SSLEngineImpl.recvAlert(SSLEngineImpl.java:1800)
> at sun.security.ssl.SSLEngineImpl.readRecord(SSLEngineImpl.java:1083)
> at sun.security.ssl.SSLEngineImpl.readNetRecord(SSLEngineImpl.java:907)
> at sun.security.ssl.SSLEngineImpl.unwrap(SSLEngineImpl.java:781)
> at javax.net.ssl.SSLEngine.unwrap(SSLEngine.java:624)
> at org.jboss.netty.handler.ssl.SslHandler.unwrap(SslHandler.java:1219)
> at org.jboss.netty.handler.ssl.SslHandler.decode(SslHandler.java:852)
> at org.jboss.netty.handler.codec.frame.FrameDecoder.callDecode(FrameDecoder.java:425)
> at org.jboss.netty.handler.codec.frame.FrameDecoder.messageReceived(FrameDecoder.java:303)
> at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:70)
> at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564)
> at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:559)
> at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:268)
> at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:255)
> at org.jboss.netty.channel.socket.nio.NioWorker.read(NioWorker.java:88)
> at org.jboss.netty.channel.socket.nio.AbstractNioWorker.process(AbstractNioWorker.java:108)
> at org.jboss.netty.channel.socket.nio.AbstractNioSelector.run(AbstractNioSelector.java:337)
> at org.jboss.netty.channel.socket.nio.AbstractNioWorker.run(AbstractNioWorker.java:89)
> at org.jboss.netty.channel.socket.nio.NioWorker.run(NioWorker.java:178)
> at org.jboss.netty.util.ThreadRenamingRunnable.run(ThreadRenamingRunnable.java:108)
> at org.jboss.netty.util.internal.DeadLockProofWorker$1.run(DeadLockProofWorker.java:42)
> at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
> at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
> at java.lang.Thread.run(Thread.java:745)
> [2016-10-19 18:08:32,863][ERROR][com.floragunn.searchguard.auth.BackendRegistry] Not yet initialized
> [2016-10-19 18:15:50,454][ERROR][com.floragunn.searchguard.auth.BackendRegistry] Not yet initialized
> [2016-10-19 18:20:11,294][ERROR][com.floragunn.searchguard.ssl.transport.SearchGuardSSLNettyTransport] [J2] SSL Problem null cert chain
> javax.net.ssl.SSLHandshakeException: null cert chain
> at sun.security.ssl.Handshaker.checkThrown(Handshaker.java:1431)
> at sun.security.ssl.SSLEngineImpl.checkTaskThrown(SSLEngineImpl.java:535)
> at sun.security.ssl.SSLEngineImpl.readNetRecord(SSLEngineImpl.java:813)
> at sun.security.ssl.SSLEngineImpl.unwrap(SSLEngineImpl.java:781)
> at javax.net.ssl.SSLEngine.unwrap(SSLEngine.java:624)
> at org.jboss.netty.handler.ssl.SslHandler.unwrap(SslHandler.java:1219)
> at org.jboss.netty.handler.ssl.SslHandler.decode(SslHandler.java:852)
> at org.jboss.netty.handler.codec.frame.FrameDecoder.callDecode(FrameDecoder.java:425)
> at org.jboss.netty.handler.codec.frame.FrameDecoder.messageReceived(FrameDecoder.java:303)
> at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:70)
> at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564)
> at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:559)
> at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:268)
> at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:255)
> at org.jboss.netty.channel.socket.nio.NioWorker.read(NioWorker.java:88)
> at org.jboss.netty.channel.socket.nio.AbstractNioWorker.process(AbstractNioWorker.java:108)
> at org.jboss.netty.channel.socket.nio.AbstractNioSelector.run(AbstractNioSelector.java:337)
> at org.jboss.netty.channel.socket.nio.AbstractNioWorker.run(AbstractNioWorker.java:89)
> at org.jboss.netty.channel.socket.nio.NioWorker.run(NioWorker.java:178)
> at org.jboss.netty.util.ThreadRenamingRunnable.run(ThreadRenamingRunnable.java:108)
> at org.jboss.netty.util.internal.DeadLockProofWorker$1.run(DeadLockProofWorker.java:42)
> at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
> at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
> at java.lang.Thread.run(Thread.java:745)
> Caused by: javax.net.ssl.SSLHandshakeException: null cert chain
> at sun.security.ssl.Alerts.getSSLException(Alerts.java:192)
> at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1666)
> at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:304)
> at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:292)
> at sun.security.ssl.ServerHandshaker.clientCertificate(ServerHandshaker.java:1865)
> at sun.security.ssl.ServerHandshaker.processMessage(ServerHandshaker.java:230)
> at sun.security.ssl.Handshaker.processLoop(Handshaker.java:979)
> at sun.security.ssl.Handshaker$1.run(Handshaker.java:919)
> at sun.security.ssl.Handshaker$1.run(Handshaker.java:916)
> at java.security.AccessController.doPrivileged(Native Method)
> at sun.security.ssl.Handshaker$DelegatedTask.run(Handshaker.java:1369)
> at org.jboss.netty.handler.ssl.SslHandler.runDelegatedTasks(SslHandler.java:1393)
> at org.jboss.netty.handler.ssl.SslHandler.unwrap(SslHandler.java:1256)
> ... 18 more
> [2016-10-19 18:58:48,946][ERROR][com.floragunn.searchguard.auth.BackendRegistry] Not yet initialized
> 
> ```
> 
> ` `
> 
> ```auto
> 
> ```
> 
> ```auto
> 
> ```

---

<div class="post-metadata">

**Author:** ![searchguard\_google\_group](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/searchguard_google_group/32/462_2.png) [@searchguard\_google\_group](https://forum.search-guard.com/u/searchguard_google_group)\
**Post date:** [October 19, 2016, 2:13pm UTC](https://forum.search-guard.com/t/search-guard-not-intialised/305/2 "2016-10-19T14:13:01Z")

</div>

Why did you comment the DN of the admin certificate?

#searchguard.authcz.admin\_dn:

You need to define an admin certificate for sgadmin to work. Please refer to the documentation:

[https://github.com/floragunncom/search-guard-docs/blob/master/installation.md](https://github.com/floragunncom/search-guard-docs/blob/master/installation.md)

> **···**
>
> On Wednesday, 19 October 2016 16:09:53 UTC+2, Rajat Singh wrote:
> 
> > my elasticsearch.yml file is
> > 
> > # ======================== Elasticsearch Configuration =========================
> 
> > #
> 
> > # NOTE: Elasticsearch comes with reasonable defaults for most settings.
> 
> > # Before you set out to tweak and tune the configuration, make sure you
> 
> > # understand what are you trying to accomplish and the consequences.
> 
> > #
> 
> > # The primary way of configuring a node is via this file. This template lists
> 
> > # the most important settings you may want to configure for a production cluster.
> 
> > #
> 
> > # Please see the documentation for further information on configuration options:
> 
> > # \<[http://www.elastic.co/guide/en/elasticsearch/reference/current/setup-configuration.html](http://www.elastic.co/guide/en/elasticsearch/reference/current/setup-configuration.html)\>
> 
> > #
> 
> > # ---------------------------------- Cluster -----------------------------------
> 
> > #
> 
> > # Use a descriptive name for your cluster:
> 
> > #
> 
> > #[cluster.name](http://cluster.name): mycluster1
> 
> > 
> 
> > #[cluster.name](http://cluster.name): mycluster1
> 
> > #
> 
> > # ------------------------------------ Node ------------------------------------
> 
> > #
> 
> > # Use a descriptive name for the node:
> 
> > #
> 
> > # [node.name](http://node.name): node-1
> 
> > #[node.name](http://node.name): node0
> 
> > #
> 
> > # Add custom attributes to the node:
> 
> > #
> 
> > # node.rack: r1
> 
> > #
> 
> > # ----------------------------------- Paths ------------------------------------
> 
> > #
> 
> > # Path to directory where to store the data (separate multiple locations by comma):
> 
> > #
> 
> > # path.data: /path/to/data
> 
> > #
> 
> > # Path to log files:
> 
> > #
> 
> > # path.logs: /path/to/logs
> 
> > #
> 
> > # ----------------------------------- Memory -----------------------------------
> 
> > #
> 
> > # Lock the memory on startup:
> 
> > #
> 
> > # bootstrap.memory\_lock: true
> 
> > #
> 
> > # Make sure that the `ES_HEAP_SIZE` environment variable is set to about half the memory
> 
> > # available on the system and that the owner of the process is allowed to use this limit.
> 
> > #
> 
> > # Elasticsearch performs poorly when the system is swapping the memory.
> 
> > ## ---------------------------------- Network -----------------------------------
> 
> > #
> 
> > # Set the bind address to a specific IP (IPv4 or IPv6):
> 
> > #
> 
> > # network.host: 192.168.0.1
> 
> > network.host: 10.150.86.177
> 
> > #
> 
> > # Set a custom port for HTTP:
> 
> > #
> 
> > # http.port: 9200
> 
> > #
> 
> > # For more information, see the documentation at:
> 
> > # \<[http://www.elastic.co/guide/en/elasticsearch/reference/current/modules-network.html](http://www.elastic.co/guide/en/elasticsearch/reference/current/modules-network.html)\>
> 
> > #
> 
> > # --------------------------------- Discovery ----------------------------------
> 
> > #
> 
> > # Pass an initial list of hosts to perform discovery when new node is started:
> 
> > # The default list of hosts is [“127.0.0.1”, “[::1]”]
> 
> > #
> 
> > # discovery.zen.ping.unicast.hosts: [“host1”, “host2”]
> 
> > #
> 
> > # Prevent the “split brain” by configuring the majority of nodes (total number of nodes / 2 + 1):
> 
> > #
> 
> > # discovery.zen.minimum\_master\_nodes: 3
> 
> > #
> 
> > # For more information, see the documentation at:
> 
> > # \<[http://www.elastic.co/guide/en/elasticsearch/reference/current/modules-discovery.html](http://www.elastic.co/guide/en/elasticsearch/reference/current/modules-discovery.html)\>
> 
> > #
> 
> > # ---------------------------------- Gateway -----------------------------------
> 
> > #
> 
> > # Block initial recovery after a full cluster restart until N nodes are started:
> 
> > #
> 
> > # gateway.recover\_after\_nodes: 3
> 
> > #
> 
> > # For more information, see the documentation at:
> 
> > # \<[http://www.elastic.co/guide/en/elasticsearch/reference/current/modules-gateway.html](http://www.elastic.co/guide/en/elasticsearch/reference/current/modules-gateway.html)\>
> 
> > #
> 
> > # ---------------------------------- Various -----------------------------------
> 
> > #
> 
> > # Disable starting multiple nodes on a single system:
> 
> > #
> 
> > # node.max\_local\_storage\_nodes: 1
> 
> > #
> 
> > # Require explicit names when deleting indices:
> 
> > #
> 
> > # action.destructive\_requires\_name: true
> 
> > searchguard.ssl.transport.keystore\_filepath: node-0-keystore.jks
> 
> > searchguard.ssl.transport.keystore\_password: changeit
> 
> > searchguard.ssl.transport.truststore\_filepath: truststore.jks
> 
> > searchguard.ssl.transport.truststore\_password: changeit
> 
> > searchguard.ssl.transport.enforce\_hostname\_verification: false
> 
> > #searchguard.authcz.admin\_dn:
> 
> > and the logs files of elastic search are
> 
> > while running the command
> 
> > ```auto
> > ./sgadmin.sh -ts truststore.jks -ks kirk-keystore.jks -cd ../sgconfig -icl
> > 
> > ```
> > 
> > ```auto
> > logs files generate the following error for this
> > 
> > ```
> > 
> > ```auto
> > [2016-10-19 17:54:52,213][ERROR][com.floragunn.searchguard.ssl.transport.	SearchGuardSSLNettyTransport] [J2] SSL Problem Received fatal alert: certificate_unknown
> > javax.net.ssl.SSLException: Received fatal alert: certificate_unknown
> > at sun.security.ssl.Alerts.getSSLException(Alerts.java:	208)
> > at sun.security.ssl.SSLEngineImpl.fatal(	SSLEngineImpl.java:1666)
> > at sun.security.ssl.SSLEngineImpl.fatal(	SSLEngineImpl.java:1634)
> > at sun.security.ssl.SSLEngineImpl.recvAlert(	SSLEngineImpl.java:1800)
> > at sun.security.ssl.SSLEngineImpl.readRecord(	SSLEngineImpl.java:1083)
> > at sun.security.ssl.SSLEngineImpl.readNetRecord(	SSLEngineImpl.java:907)
> > at sun.security.ssl.SSLEngineImpl.unwrap(	SSLEngineImpl.java:781)
> > at javax.net.ssl.SSLEngine.	unwrap(SSLEngine.java:624)
> > at org.jboss.netty.handler.ssl.SslHandler.unwrap(SslHandler.	java:1219)
> > at org.jboss.netty.handler.ssl.SslHandler.decode(SslHandler.	java:852)
> > at org.jboss.netty.handler.codec.frame.FrameDecoder.callDecode(	FrameDecoder.java:425)
> > at org.jboss.netty.handler.codec.frame.FrameDecoder.messageReceived(FrameDecoder.	java:303)
> > at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.	java:70)
> > at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:	564)
> > at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:	559)
> > at org.jboss.netty.channel.Channels.fireMessageReceived(	Channels.java:268)
> > at org.jboss.netty.channel.Channels.fireMessageReceived(	Channels.java:255)
> > at org.jboss.netty.channel.socket.nio.NioWorker.read(	NioWorker.java:88)
> > at org.jboss.netty.channel.socket.nio.AbstractNioWorker.process(AbstractNioWorker.	java:108)
> > at org.jboss.netty.channel.socket.nio.AbstractNioSelector.run(	AbstractNioSelector.java:337)
> > at org.jboss.netty.channel.socket.nio.AbstractNioWorker.	run(AbstractNioWorker.java:89)
> > at org.jboss.netty.channel.socket.nio.NioWorker.run(	NioWorker.java:178)
> > at org.jboss.netty.util.ThreadRenamingRunnable.run(ThreadRenamingRunnable.java:	108)
> > at org.jboss.netty.util.internal.DeadLockProofWorker$1.run(	DeadLockProofWorker.java:42)
> > at java.util.concurrent.ThreadPoolExecutor.runWorker(	ThreadPoolExecutor.java:1142)
> > at java.util.concurrent.ThreadPoolExecutor$Worker.run(	ThreadPoolExecutor.java:617)
> > at java.lang.Thread.run(Thread.java:745)
> > [2016-10-19 17:54:57,076][ERROR][com.floragunn.searchguard.ssl.transport.	SearchGuardSSLNettyTransport] [J2] SSL Problem Received fatal alert: certificate_unknown
> > javax.net.ssl.SSLException: Received fatal alert: certificate_unknown
> > at sun.security.ssl.Alerts.getSSLException(Alerts.java:	208)
> > at sun.security.ssl.SSLEngineImpl.fatal(	SSLEngineImpl.java:1666)
> > at sun.security.ssl.SSLEngineImpl.fatal(	SSLEngineImpl.java:1634)
> > at sun.security.ssl.SSLEngineImpl.recvAlert(	SSLEngineImpl.java:1800)
> > at sun.security.ssl.SSLEngineImpl.readRecord(	SSLEngineImpl.java:1083)
> > at sun.security.ssl.SSLEngineImpl.readNetRecord(	SSLEngineImpl.java:907)
> > at sun.security.ssl.SSLEngineImpl.unwrap(	SSLEngineImpl.java:781)
> > at javax.net.ssl.SSLEngine.	unwrap(SSLEngine.java:624)
> > at org.jboss.netty.handler.ssl.SslHandler.unwrap(SslHandler.	java:1219)
> > at org.jboss.netty.handler.ssl.SslHandler.decode(SslHandler.	java:852)
> > at org.jboss.netty.handler.codec.frame.FrameDecoder.callDecode(	FrameDecoder.java:425)
> > at org.jboss.netty.handler.codec.frame.FrameDecoder.messageReceived(FrameDecoder.	java:303)
> > at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.	java:70)
> > at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:	564)
> > at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:	559)
> > at org.jboss.netty.channel.Channels.fireMessageReceived(	Channels.java:268)
> > at org.jboss.netty.channel.Channels.fireMessageReceived(	Channels.java:255)
> > at org.jboss.netty.channel.socket.nio.NioWorker.read(	NioWorker.java:88)
> > at org.jboss.netty.channel.socket.nio.AbstractNioWorker.process(AbstractNioWorker.	java:108)
> > at org.jboss.netty.channel.socket.nio.AbstractNioSelector.run(	AbstractNioSelector.java:337)
> > at org.jboss.netty.channel.socket.nio.AbstractNioWorker.	run(AbstractNioWorker.java:89)
> > at org.jboss.netty.channel.socket.nio.NioWorker.run(	NioWorker.java:178)
> > at org.jboss.netty.util.ThreadRenamingRunnable.run(ThreadRenamingRunnable.java:	108)
> > at org.jboss.netty.util.internal.DeadLockProofWorker$1.run(	DeadLockProofWorker.java:42)
> > at java.util.concurrent.ThreadPoolExecutor.runWorker(	ThreadPoolExecutor.java:1142)
> > at java.util.concurrent.ThreadPoolExecutor$Worker.run(	ThreadPoolExecutor.java:617)
> > at java.lang.Thread.run(Thread.java:745)
> > [2016-10-19 17:55:02,118][ERROR][com.floragunn.searchguard.ssl.transport.	SearchGuardSSLNettyTransport] [J2] SSL Problem Received fatal alert: certificate_unknown
> > javax.net.ssl.SSLException: Received fatal alert: certificate_unknown
> > at sun.security.ssl.Alerts.getSSLException(Alerts.java:	208)
> > at sun.security.ssl.SSLEngineImpl.fatal(	SSLEngineImpl.java:1666)
> > at sun.security.ssl.SSLEngineImpl.fatal(	SSLEngineImpl.java:1634)
> > at sun.security.ssl.SSLEngineImpl.recvAlert(	SSLEngineImpl.java:1800)
> > at sun.security.ssl.SSLEngineImpl.readRecord(	SSLEngineImpl.java:1083)
> > at sun.security.ssl.SSLEngineImpl.readNetRecord(	SSLEngineImpl.java:907)
> > at sun.security.ssl.SSLEngineImpl.unwrap(	SSLEngineImpl.java:781)
> > at javax.net.ssl.SSLEngine.	unwrap(SSLEngine.java:624)
> > at org.jboss.netty.handler.ssl.SslHandler.unwrap(SslHandler.	java:1219)
> > at org.jboss.netty.handler.ssl.SslHandler.decode(SslHandler.	java:852)
> > at org.jboss.netty.handler.codec.frame.FrameDecoder.callDecode(	FrameDecoder.java:425)
> > at org.jboss.netty.handler.codec.frame.FrameDecoder.messageReceived(FrameDecoder.	java:303)
> > at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.	java:70)
> > at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:	564)
> > at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:	559)
> > at org.jboss.netty.channel.Channels.fireMessageReceived(	Channels.java:268)
> > at org.jboss.netty.channel.Channels.fireMessageReceived(	Channels.java:255)
> > at org.jboss.netty.channel.socket.nio.NioWorker.read(	NioWorker.java:88)
> > at org.jboss.netty.channel.socket.nio.AbstractNioWorker.process(AbstractNioWorker.	java:108)
> > at org.jboss.netty.channel.socket.nio.AbstractNioSelector.run(	AbstractNioSelector.java:337)
> > at org.jboss.netty.channel.socket.nio.AbstractNioWorker.	run(AbstractNioWorker.java:89)
> > at org.jboss.netty.channel.socket.nio.NioWorker.run(	NioWorker.java:178)
> > at org.jboss.netty.util.ThreadRenamingRunnable.run(ThreadRenamingRunnable.java:	108)
> > at org.jboss.netty.util.internal.DeadLockProofWorker$1.run(	DeadLockProofWorker.java:42)
> > at java.util.concurrent.ThreadPoolExecutor.runWorker(	ThreadPoolExecutor.java:1142)
> > at java.util.concurrent.ThreadPoolExecutor$Worker.run(	ThreadPoolExecutor.java:617)
> > at java.lang.Thread.run(Thread.java:745)
> > [2016-10-19 17:55:07,155][ERROR][com.floragunn.searchguard.ssl.transport.	SearchGuardSSLNettyTransport] [J2] SSL Problem Received fatal alert: certificate_unknown
> > javax.net.ssl.SSLException: Received fatal alert: certificate_unknown
> > at sun.security.ssl.Alerts.getSSLException(Alerts.java:	208)
> > at sun.security.ssl.SSLEngineImpl.fatal(	SSLEngineImpl.java:1666)
> > at sun.security.ssl.SSLEngineImpl.fatal(	SSLEngineImpl.java:1634)
> > at sun.security.ssl.SSLEngineImpl.recvAlert(	SSLEngineImpl.java:1800)
> > at sun.security.ssl.SSLEngineImpl.readRecord(	SSLEngineImpl.java:1083)
> > at sun.security.ssl.SSLEngineImpl.readNetRecord(	SSLEngineImpl.java:907)
> > at sun.security.ssl.SSLEngineImpl.unwrap(	SSLEngineImpl.java:781)
> > at javax.net.ssl.SSLEngine.	unwrap(SSLEngine.java:624)
> > at org.jboss.netty.handler.ssl.SslHandler.unwrap(SslHandler.	java:1219)
> > at org.jboss.netty.handler.ssl.SslHandler.decode(SslHandler.	java:852)
> > at org.jboss.netty.handler.codec.frame.FrameDecoder.callDecode(	FrameDecoder.java:425)
> > at org.jboss.netty.handler.codec.frame.FrameDecoder.messageReceived(FrameDecoder.	java:303)
> > at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.	java:70)
> > at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:	564)
> > at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:	559)
> > at org.jboss.netty.channel.Channels.fireMessageReceived(	Channels.java:268)
> > at org.jboss.netty.channel.Channels.fireMessageReceived(	Channels.java:255)
> > at org.jboss.netty.channel.socket.nio.NioWorker.read(	NioWorker.java:88)
> > at org.jboss.netty.channel.socket.nio.AbstractNioWorker.process(AbstractNioWorker.	java:108)
> > at org.jboss.netty.channel.socket.nio.AbstractNioSelector.run(	AbstractNioSelector.java:337)
> > at org.jboss.netty.channel.socket.nio.AbstractNioWorker.
> > 
> > ```

---

<div class="post-metadata">

**Author:** ![Rajat\_Singh](https://avatars.discourse-cdn.com/v4/letter/r/cab0a1/32.png) [@Rajat\_Singh](https://forum.search-guard.com/u/Rajat_Singh)\
**Post date:** [October 19, 2016, 2:37pm UTC](https://forum.search-guard.com/t/search-guard-not-intialised/305/3 "2016-10-19T14:37:14Z")

</div>

Thanks a lot for reply  
i am adding the elasticsearch.yml file after the changes

# ======================== Elasticsearch Configuration =========================

> **···**
>
> On Wed, Oct 19, 2016 at 7:43 PM, [info@search-guard.com](mailto:info@search-guard.com) wrote:
> 
> > Why did you comment the DN of the admin certificate?
> 
> > #searchguard.authcz.admin\_dn:
> 
> > 
> 
> > You need to define an admin certificate for sgadmin to work. Please refer to the documentation:
> 
> > 
> 
> > [https://github.com/floragunncom/search-guard-docs/blob/master/installation.md](https://github.com/floragunncom/search-guard-docs/blob/master/installation.md)
> 
> > On Wednesday, 19 October 2016 16:09:53 UTC+2, Rajat Singh wrote:
> > 
> > > my elasticsearch.yml file is
> > > 
> > > # ======================== Elasticsearch Configuration =========================
> 
> > > #
> 
> > > # NOTE: Elasticsearch comes with reasonable defaults for most settings.
> 
> > > # Before you set out to tweak and tune the configuration, make sure you
> 
> > > # understand what are you trying to accomplish and the consequences.
> 
> > > #
> 
> > > # The primary way of configuring a node is via this file. This template lists
> 
> > > # the most important settings you may want to configure for a production cluster.
> 
> > > #
> 
> > > # Please see the documentation for further information on configuration options:
> 
> > > # \<[http://www.elastic.co/guide/en/elasticsearch/reference/current/setup-configuration.html](http://www.elastic.co/guide/en/elasticsearch/reference/current/setup-configuration.html)\>
> 
> > > #
> 
> > > # ---------------------------------- Cluster -----------------------------------
> 
> > > #
> 
> > > # Use a descriptive name for your cluster:
> 
> > > #
> 
> > > #[cluster.name](http://cluster.name): mycluster1
> 
> > >
> 
> > > #[cluster.name](http://cluster.name): mycluster1
> 
> > > #
> 
> > > # ------------------------------------ Node ------------------------------------
> 
> > > #
> 
> > > # Use a descriptive name for the node:
> 
> > > #
> 
> > > # [node.name](http://node.name): node-1
> 
> > > #[node.name](http://node.name): node0
> 
> > > #
> 
> > > # Add custom attributes to the node:
> 
> > > #
> 
> > > # node.rack: r1
> 
> > > #
> 
> > > # ----------------------------------- Paths ------------------------------------
> 
> > > #
> 
> > > # Path to directory where to store the data (separate multiple locations by comma):
> 
> > > #
> 
> > > # path.data: /path/to/data
> 
> > > #
> 
> > > # Path to log files:
> 
> > > #
> 
> > > # path.logs: /path/to/logs
> 
> > > #
> 
> > > # ----------------------------------- Memory -----------------------------------
> 
> > > #
> 
> > > # Lock the memory on startup:
> 
> > > #
> 
> > > # bootstrap.memory\_lock: true
> 
> > > #
> 
> > > # Make sure that the `ES_HEAP_SIZE` environment variable is set to about half the memory
> 
> > > # available on the system and that the owner of the process is allowed to use this limit.
> 
> > > #
> 
> > > # Elasticsearch performs poorly when the system is swapping the memory.
> 
> > > ## ---------------------------------- Network -----------------------------------
> 
> > > #
> 
> > > # Set the bind address to a specific IP (IPv4 or IPv6):
> 
> > > #
> 
> > > # network.host: 192.168.0.1
> 
> > > network.host: 10.150.86.177
> 
> > > #
> 
> > > # Set a custom port for HTTP:
> 
> > > #
> 
> > > # http.port: 9200
> 
> > > #
> 
> > > # For more information, see the documentation at:
> 
> > > # \<[http://www.elastic.co/guide/en/elasticsearch/reference/current/modules-network.html](http://www.elastic.co/guide/en/elasticsearch/reference/current/modules-network.html)\>
> 
> > > #
> 
> > > # --------------------------------- Discovery ----------------------------------
> 
> > > #
> 
> > > # Pass an initial list of hosts to perform discovery when new node is started:
> 
> > > # The default list of hosts is [“127.0.0.1”, “[::1]”]
> 
> > > #
> 
> > > # discovery.zen.ping.unicast.hosts: [“host1”, “host2”]
> 
> > > #
> 
> > > # Prevent the “split brain” by configuring the majority of nodes (total number of nodes / 2 + 1):
> 
> > > #
> 
> > > # discovery.zen.minimum\_master\_nodes: 3
> 
> > > #
> 
> > > # For more information, see the documentation at:
> 
> > > # \<[http://www.elastic.co/guide/en/elasticsearch/reference/current/modules-discovery.html](http://www.elastic.co/guide/en/elasticsearch/reference/current/modules-discovery.html)\>
> 
> > > #
> 
> > > # ---------------------------------- Gateway -----------------------------------
> 
> > > #
> 
> > > # Block initial recovery after a full cluster restart until N nodes are started:
> 
> > > #
> 
> > > # gateway.recover\_after\_nodes: 3
> 
> > > #
> 
> > > # For more information, see the documentation at:
> 
> > > # \<[http://www.elastic.co/guide/en/elasticsearch/reference/current/modules-gateway.html](http://www.elastic.co/guide/en/elasticsearch/reference/current/modules-gateway.html)\>
> 
> > > #
> 
> > > # ---------------------------------- Various -----------------------------------
> 
> > > #
> 
> > > # Disable starting multiple nodes on a single system:
> 
> > > #
> 
> > > # node.max\_local\_storage\_nodes: 1
> 
> > > #
> 
> > > # Require explicit names when deleting indices:
> 
> > > #
> 
> > > # action.destructive\_requires\_name: true
> 
> > > searchguard.ssl.transport.keystore\_filepath: node-0-keystore.jks
> 
> > > searchguard.ssl.transport.keystore\_password: changeit
> 
> > > searchguard.ssl.transport.truststore\_filepath: truststore.jks
> 
> > > searchguard.ssl.transport.truststore\_password: changeit
> 
> > > searchguard.ssl.transport.enforce\_hostname\_verification: false
> 
> > > #searchguard.authcz.admin\_dn:
> 
> > > and the logs files of elastic search are
> 
> > > while running the command
> 
> > > ```auto
> > > ./sgadmin.sh -ts truststore.jks -ks kirk-keystore.jks -cd ../sgconfig -icl
> > > 
> > > ```
> > > 
> > > ```auto
> > > logs files generate the following error for this
> > > 
> > > ```
> > > 
> > > ```auto
> > > [2016-10-19 17:54:52,213][ERROR][com.floragunn.searchguard.ssl.transport	.SearchGuardSSLNettyTransport] [J2] SSL Problem Received fatal alert: certificate_unknown
> > > javax.net.ssl.SSLException: Received fatal alert: certificate_unknown
> > > at sun.security.ssl.Alerts.getSSL	Exception(Alerts.java:208)
> > > at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:	1666)
> > > at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:	1634)
> > > at sun.security.ssl.SSLEngineImpl.recvAlert(SSLEngineImpl.java:	1800)
> > > at sun.security.ssl.SSLEngineImpl.readRecord(SSLEngineImpl.	java:1083)
> > > at sun.security.ssl.SSLEngineImpl.readNetRecord(SSLEngineImpl.	java:907)
> > > at sun.security.ssl.SSLEngineImpl.unwrap(SSLEngineImpl.java:	781)
> > > at javax.net.ssl.SSLEngine.unwrap	(SSLEngine.java:624)
> > > at org.jboss.netty.handler.ssl.SslHandler.unwrap(SslHandler.jav	a:1219)
> > > at org.jboss.netty.handler.ssl.SslHandler.decode(SslHandler.jav	a:852)
> > > at org.jboss.netty.handler.codec.frame.FrameDecoder.callDecode(	FrameDecoder.java:425)
> > > at org.jboss.netty.handler.codec.frame.FrameDecoder.messageRece	ived(FrameDecoder.java:303)
> > > at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamH	andler.java:70)
> > > at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:56	4)
> > > at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:55	9)
> > > at org.jboss.netty.channel.Channels.fireMessageReceived(Channel	s.java:268)
> > > at org.jboss.netty.channel.Channels.fireMessageReceived(Channel	s.java:255)
> > > at org.jboss.netty.channel.socket.nio.NioWorker.read(NioWorker.	java:88)
> > > at org.jboss.netty.channel.socket.nio.AbstractNioWorker.process	(AbstractNioWorker.java:108)
> > > at org.jboss.netty.channel.socket.nio.AbstractNioSelector.run(A	bstractNioSelector.java:337)
> > > at org.jboss.netty.channel.socket.nio.AbstractNioWorker.run(	AbstractNioWorker.java:89)
> > > at org.jboss.netty.channel.socket.nio.NioWorker.run(NioWorker.	java:178)
> > > at org.jboss.netty.util.ThreadRenamingRunnable.run(ThreadRenami	ngRunnable.java:108)
> > > at org.jboss.netty.util.internal.DeadLockProofWorker$1.run(Dead	LockProofWorker.java:42)
> > > at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPool	Executor.java:1142)
> > > at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoo	lExecutor.java:617)
> > > at java.lang.Thread.run(Thread.java:745)
> > > [2016-10-19 17:54:57,076][ERROR][com.floragunn.searchguard.ssl.transport	.SearchGuardSSLNettyTransport] [J2] SSL Problem Received fatal alert: certificate_unknown
> > > javax.net.ssl.SSLException: Received fatal alert: certificate_unknown
> > > at sun.security.ssl.Alerts.getSSL	Exception(Alerts.java:208)
> > > at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:	1666)
> > > at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:	1634)
> > > at sun.security.ssl.SSLEngineImpl.recvAlert(SSLEngineImpl.java:	1800)
> > > at sun.security.ssl.SSLEngineImpl.readRecord(SSLEngineImpl.	java:1083)
> > > at sun.security.ssl.SSLEngineImpl.readNetRecord(SSLEngineImpl.	java:907)
> > > at sun.security.ssl.SSLEngineImpl.unwrap(SSLEngineImpl.java:	781)
> > > at javax.net.ssl.SSLEngine.unwrap	(SSLEngine.java:624)
> > > at org.jboss.netty.handler.ssl.SslHandler.unwrap(SslHandler.jav	a:1219)
> > > at org.jboss.netty.handler.ssl.SslHandler.decode(SslHandler.jav	a:852)
> > > at org.jboss.netty.handler.codec.frame.FrameDecoder.callDecode(	FrameDecoder.java:425)
> > > at org.jboss.netty.handler.codec.frame.FrameDecoder.messageRece	ived(FrameDecoder.java:303)
> > > at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamH	andler.java:70)
> > > at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:56	4)
> > > at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:55	9)
> > > at org.jboss.netty.channel.Channels.fireMessageReceived(Channel	s.java:268)
> > > at org.jboss.netty.channel.Channels.fireMessageReceived(Channel	s.java:255)
> > > at org.jboss.netty.channel.socket.nio.NioWorker.read(NioWorker.	java:88)
> > > at org.jboss.netty.channel.socket.nio.AbstractNioWorker.process	(AbstractNioWorker.java:108)
> > > at org.jboss.netty.channel.socket.nio.AbstractNioSelector.run(A	bstractNioSelector.java:337)
> > > at org.jboss.netty.channel.socket.nio.AbstractNioWorker.run(	AbstractNioWorker.java:89)
> > > at org.jboss.netty.channel.socket.nio.NioWorker.run(NioWorker.	java:178)
> > > at org.jboss.netty.util.ThreadRenamingRunnable.run(ThreadRenami	ngRunnable.java:108)
> > > at org.jboss.netty.util.internal.DeadLockProofWorker$1.run(Dead	LockProofWorker.java:42)
> > > at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPool	Executor.java:1142)
> > > at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoo	lExecutor.java:617)
> > > at java.lang.Thread.run(Thread.java:745)
> > > [2016-10-19 17:55:02,118][ERROR][com.floragunn.searchguard.ssl.transport	.SearchGuardSSLNettyTransport] [J2] SSL Problem Received fatal alert: certificate_unknown
> > > javax.net.ssl.SSLException: Received fatal alert: certificate_unknown
> > > at sun.security.ssl.Alerts.getSSL	Exception(Alerts.java:208)
> > > at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:	1666)
> > > at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:	1634)
> > > at sun.security.ssl.SSLEngineImpl.recvAlert(SSLEngineImpl.java:	1800)
> > > at sun.security.ssl.SSLEngineImpl.readRecord(SSLEngineImpl.	java:1083)
> > > at sun.security.ssl.SSLEngineImpl.readNetRecord(SSLEngineImpl.	java:907)
> > > at sun.security.ssl.SSLEngineImpl.unwrap(SSLEngineImpl.java:	781)
> > > at javax.net.ssl.SSLEngine.unwrap	(SSLEngine.java:624)
> > > at org.jboss.netty.handler.ssl.SslHandler.unwrap(SslHandler.jav	a:1219)
> > > at org.jboss.netty.handler.ssl.SslHandler.decode(SslHandler.jav	a:852)
> > > at org.jboss.netty.handler.codec.frame.FrameDecoder.callDecode(	FrameDecoder.java:425)
> > > at org.jboss.netty.handler.codec.frame.FrameDecoder.messageRece	ived(FrameDecoder.java:303)
> > > at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamH	andler.java:70)
> > > at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:56	4)
> > > at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:55	9)
> > > at org.jboss.netty.channel.Channels.fireMessageReceived(Channel	s.java:268)
> > > at org.jboss.netty.channel.Channels.fireMessageReceived(Channel	s.java:255)
> > > at org.jboss.netty.channel.socket.nio.NioWorker.read(NioWorker.	java:88)
> > > at org.jboss.netty.channel.socket.nio.AbstractNioWorker.process	(AbstractNioWorker.java:108)
> > > at org.jboss.netty.channel.socket.nio.AbstractNioSelector.run(A	bstractNioSelector.java:337)
> > > at org.jboss.netty.channel.socket.nio.AbstractNioWorker.run(	AbstractNioWorker.java:89)
> > > at org.jboss.netty.channel.socket.nio.NioWorker.run(NioWorker.	java:178)
> > > at org.jboss.netty.util.ThreadRenamingRunnable.run(ThreadRenami	ngRunnable.java:108)
> > > at org.jboss.netty.util.internal.DeadLockProofWorker$1.run(Dead	LockProofWorker.java:42)
> > > at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPool	Executor.java:1142)
> > > at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoo	lExecutor.java:617)
> > > at java.lang.Thread.run(Thread.java:745)
> > > [2016-10-19 17:55:07,155][ERROR][com.floragunn.searchguard.ssl.transport	.SearchGuardSSLNettyTransport] [J2] SSL Problem Received fatal alert: certificate_unknown
> > > javax.net.ssl.SSLException: Received fatal alert: certificate_unknown
> > > at sun.security.ssl.Alerts.getSSL	Exception(Alerts.java:208)
> > > at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:	1666)
> > > at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:	1634)
> > > at sun.security.ssl.SSLEngineImpl.recvAlert(SSLEngineImpl.java:	1800)
> > > at sun.security.ssl.SSLEngineImpl.readRecord(SSLEngineImpl.	java:1083)
> > > at sun.security.ssl.SSLEngineImpl.readNetRecord(SSLEngineImpl.	java:907)
> > > at sun.security.ssl.SSLEngineImpl.unwrap(SSLEngineImpl.java:	781)
> > > at javax.net.ssl.SSLEngine.unwrap	(SSLEngine.java:624)
> > > at org.jboss.netty.handler.ssl.SslHandler.unwrap(SslHandler.jav	a:1219)
> > > at org.jboss.netty.handler.ssl.SslHandler.decode(SslHandler.jav	a:852)
> > > at org.jboss.netty.handler.codec.frame.FrameDecoder.callDecode(	FrameDecoder.java:425)
> > > at org.jboss.netty.handler.codec.frame.FrameDecoder.messageRece	ived(FrameDecoder.java:303)
> > > at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamH	andler.java:70)
> > > at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:56	4)
> > > at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:55	9)
> > > at org.jboss.netty.channel.Channels.fireMessageReceived(Channel	s.java:268)
> > > at org.jboss.netty.channel.Channels.fireMessageReceived(Channel	s.java:255)
> > > at org.jboss.netty.channel.socket.nio.NioWorker.read(NioWorker.	java:88)
> > > at org.jboss.netty.channel.socket.nio.AbstractNioWorker.process	(AbstractNioWorker.java:108)
> > > at org.jboss.netty.channel.socket.nio.AbstractNioSelector.run(A	bstractNioSelector.java:337)
> > > at org.jboss.netty.channel.socket.nio.AbstractNioWorker.run(	AbstractNioWorker.java:89)
> > > at org.jboss.netty.channel.socket.nio.NioWorker.run(NioWorker.	java:178)
> > > at org.jboss.netty.util.ThreadRenamingRunnable.run(ThreadRenami	ngRunnable.java:108)
> > > at org.jboss.netty.util.internal.DeadLockProofWorker$1.run(Dead	LockProofWorker.java:42)
> > > at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPool	Executor.java:1142)
> > > at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoo	lExecutor.java:617)
> > > at java.lang.Thread.run(Thread.java:745)
> > > [2016-10-19 17:57:20,447][ERROR][com.floragunn.searchguard.ssl.transport	.SearchGuardSSLNettyTransport] [J2] SSL Problem Received fatal alert: certificate_unknown
> > > javax.net.ssl.SSLException: Received fatal alert: certificate_unknown
> > > at sun.security.ssl.Alerts.getSSL	Exception(Alerts.java:208)
> > > at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:	1666)
> > > at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:	1634)
> > > at sun.security.ssl.SSLEngineImpl.recvAlert(SSLEngineImpl.java:	1800)
> > > at sun.security.ssl.SSLEngineImpl.readRecord(SSLEngineImpl.	java:1083)
> > > at sun.security.ssl.SSLEngineImpl.readNetRecord(SSLEngineImpl.	java:907)
> > > at sun.security.ssl.SSLEngineImpl.unwrap(SSLEngineImpl.java:	781)
> > > at javax.net.ssl.SSLEngine.unwrap	(SSLEngine.java:624)
> > > at org.jboss.netty.handler.ssl.SslHandler.unwrap(SslHandler.jav	a:1219)
> > > at org.jboss.netty.handler.ssl.SslHandler.decode(SslHandler.jav	a:852)
> > > at org.jboss.netty.handler.codec.
> > > 
> > > ```

---

<div class="post-metadata">

**Author:** ![Rajat\_Singh](https://avatars.discourse-cdn.com/v4/letter/r/cab0a1/32.png) [@Rajat\_Singh](https://forum.search-guard.com/u/Rajat_Singh)\
**Post date:** [October 19, 2016, 3:29pm UTC](https://forum.search-guard.com/t/search-guard-not-intialised/305/4 "2016-10-19T15:29:09Z")

</div>

I had uncommented and again tried it but it was not working

> **···**
>
> On Wed, Oct 19, 2016 at 8:07 PM, Rajat Singh [rajatsingh.speed13@gmail.com](mailto:rajatsingh.speed13@gmail.com) wrote:
> 
> > Thanks a lot for reply  
> > i am adding the elasticsearch.yml file after the changes
> 
> > # ======================== Elasticsearch Configuration =========================
> 
> > #
> 
> > # NOTE: Elasticsearch comes with reasonable defaults for most settings.
> 
> > # Before you set out to tweak and tune the configuration, make sure you
> 
> > # understand what are you trying to accomplish and the consequences.
> 
> > #
> 
> > # The primary way of configuring a node is via this file. This template lists
> 
> > # the most important settings you may want to configure for a production cluster.
> 
> > #
> 
> > # Please see the documentation for further information on configuration options:
> 
> > # \<[http://www.elastic.co/guide/en/elasticsearch/reference/current/setup-configuration.html](http://www.elastic.co/guide/en/elasticsearch/reference/current/setup-configuration.html)\>
> 
> > #
> 
> > # ---------------------------------- Cluster -----------------------------------
> 
> > #
> 
> > # Use a descriptive name for your cluster:
> 
> > #
> 
> > #[cluster.name](http://cluster.name): mycluster1
> 
> > 
> 
> > #[cluster.name](http://cluster.name): mycluster1
> 
> > #
> 
> > # ------------------------------------ Node ------------------------------------
> 
> > #
> 
> > # Use a descriptive name for the node:
> 
> > #
> 
> > # [node.name](http://node.name): node-1
> 
> > #[node.name](http://node.name): node0
> 
> > #
> 
> > # Add custom attributes to the node:
> 
> > #
> 
> > # node.rack: r1
> 
> > #
> 
> > # ----------------------------------- Paths ------------------------------------
> 
> > #
> 
> > # Path to directory where to store the data (separate multiple locations by comma):
> 
> > #
> 
> > # path.data: /path/to/data
> 
> > #
> 
> > # Path to log files:
> 
> > #
> 
> > # path.logs: /path/to/logs
> 
> > #
> 
> > # ----------------------------------- Memory -----------------------------------
> 
> > #
> 
> > # Lock the memory on startup:
> 
> > #
> 
> > # bootstrap.memory\_lock: true
> 
> > #
> 
> > # Make sure that the `ES_HEAP_SIZE` environment variable is set to about half the memory
> 
> > # available on the system and that the owner of the process is allowed to use this limit.
> 
> > #
> 
> > # Elasticsearch performs poorly when the system is swapping the memory.
> 
> > #
> 
> > # ---------------------------------- Network -----------------------------------
> 
> > #
> 
> > # Set the bind address to a specific IP (IPv4 or IPv6):
> 
> > #
> 
> > # network.host: 192.168.0.1
> 
> > network.host: 10.150.86.177
> 
> > #
> 
> > # Set a custom port for HTTP:
> 
> > #
> 
> > # http.port: 9200
> 
> > #
> 
> > # For more information, see the documentation at:
> 
> > # \<[http://www.elastic.co/guide/en/elasticsearch/reference/current/modules-network.html](http://www.elastic.co/guide/en/elasticsearch/reference/current/modules-network.html)\>
> 
> > #
> 
> > # --------------------------------- Discovery ----------------------------------
> 
> > #
> 
> > # Pass an initial list of hosts to perform discovery when new node is started:
> 
> > # The default list of hosts is [“127.0.0.1”, “[::1]”]
> 
> > #
> 
> > # discovery.zen.ping.unicast.hosts: [“host1”, “host2”]
> 
> > #
> 
> > # Prevent the “split brain” by configuring the majority of nodes (total number of nodes / 2 + 1):
> 
> > #
> 
> > # discovery.zen.minimum\_master\_nodes: 3
> 
> > #
> 
> > # For more information, see the documentation at:
> 
> > # \<[http://www.elastic.co/guide/en/elasticsearch/reference/current/modules-discovery.html](http://www.elastic.co/guide/en/elasticsearch/reference/current/modules-discovery.html)\>
> 
> > #
> 
> > # ---------------------------------- Gateway -----------------------------------
> 
> > #
> 
> > # Block initial recovery after a full cluster restart until N nodes are started:
> 
> > #
> 
> > # gateway.recover\_after\_nodes: 3
> 
> > #
> 
> > # For more information, see the documentation at:
> 
> > # \<[http://www.elastic.co/guide/en/elasticsearch/reference/current/modules-gateway.html](http://www.elastic.co/guide/en/elasticsearch/reference/current/modules-gateway.html)\>
> 
> > #
> 
> > # ---------------------------------- Various -----------------------------------
> 
> > #
> 
> > # Disable starting multiple nodes on a single system:
> 
> > #
> 
> > # node.max\_local\_storage\_nodes: 1
> 
> > #
> 
> > # Require explicit names when deleting indices:
> 
> > #
> 
> > # action.destructive\_requires\_name: true
> 
> > searchguard.ssl.transport.keystore\_filepath: node-0-keystore.jks
> 
> > searchguard.ssl.transport.keystore\_password: changeit
> 
> > searchguard.ssl.transport.truststore\_filepath: truststore.jks
> 
> > searchguard.ssl.transport.truststore\_password: changeit
> 
> > searchguard.ssl.transport.enforce\_hostname\_verification: false
> 
> > #searchguard.authcz.admin\_dn:
> 
> > # - cn=admin,ou=Test,ou=ou,dc=company,dc=com
> 
> > # - cn=smith,ou=IT,ou=IT,dc=company,dc=com
> 
> > #searchguard.authcz.admin\_dn:
> 
> > # -“CN=kirk,OU=client,O=client,L=test, C=DE”
> 
> > transport.profiles.default.port: 9300-9400
> 
> > security.manager.enabled: false
> 
> > searchguard.authcz.admin\_dn:
> 
> > - “CN=kirk,OU=client,O=client,L=test, C=DE”
> 
> > searchguard.authcz.admin\_dn:
> 
> > -“cn=admin,ou=Test,ou=ou,dc=company,dc=com”
> 
> > 
> 
> > in this files firstly i had run it by adding the CN=kirk,OU=client,O=client,L=test, C=DE
> 
> > after that run it with cn=admin,ou=Test,ou=ou,dc=company,dc=com
> 
> > both time getting the same error
> 
> > can you please help me out
> 
> > i am trying this from past one week
> 
> > 
> 
> On Wed, Oct 19, 2016 at 7:43 PM, [info@search-guard.com](mailto:info@search-guard.com) wrote:
> 
> > Why did you comment the DN of the admin certificate?
> 
> > #searchguard.authcz.admin\_dn:
> 
> > 
> 
> > You need to define an admin certificate for sgadmin to work. Please refer to the documentation:
> 
> > 
> 
> > [https://github.com/floragunncom/search-guard-docs/blob/master/installation.md](https://github.com/floragunncom/search-guard-docs/blob/master/installation.md)
> 
> > On Wednesday, 19 October 2016 16:09:53 UTC+2, Rajat Singh wrote:
> > 
> > > my elasticsearch.yml file is
> > > 
> > > # ======================== Elasticsearch Configuration =========================
> 
> > > #
> 
> > > # NOTE: Elasticsearch comes with reasonable defaults for most settings.
> 
> > > # Before you set out to tweak and tune the configuration, make sure you
> 
> > > # understand what are you trying to accomplish and the consequences.
> 
> > > #
> 
> > > # The primary way of configuring a node is via this file. This template lists
> 
> > > # the most important settings you may want to configure for a production cluster.
> 
> > > #
> 
> > > # Please see the documentation for further information on configuration options:
> 
> > > # \<[http://www.elastic.co/guide/en/elasticsearch/reference/current/setup-configuration.html](http://www.elastic.co/guide/en/elasticsearch/reference/current/setup-configuration.html)\>
> 
> > > #
> 
> > > # ---------------------------------- Cluster -----------------------------------
> 
> > > #
> 
> > > # Use a descriptive name for your cluster:
> 
> > > #
> 
> > > #[cluster.name](http://cluster.name): mycluster1
> 
> > >
> 
> > > #[cluster.name](http://cluster.name): mycluster1
> 
> > > #
> 
> > > # ------------------------------------ Node ------------------------------------
> 
> > > #
> 
> > > # Use a descriptive name for the node:
> 
> > > #
> 
> > > # [node.name](http://node.name): node-1
> 
> > > #[node.name](http://node.name): node0
> 
> > > #
> 
> > > # Add custom attributes to the node:
> 
> > > #
> 
> > > # node.rack: r1
> 
> > > #
> 
> > > # ----------------------------------- Paths ------------------------------------
> 
> > > #
> 
> > > # Path to directory where to store the data (separate multiple locations by comma):
> 
> > > #
> 
> > > # path.data: /path/to/data
> 
> > > #
> 
> > > # Path to log files:
> 
> > > #
> 
> > > # path.logs: /path/to/logs
> 
> > > #
> 
> > > # ----------------------------------- Memory -----------------------------------
> 
> > > #
> 
> > > # Lock the memory on startup:
> 
> > > #
> 
> > > # bootstrap.memory\_lock: true
> 
> > > #
> 
> > > # Make sure that the `ES_HEAP_SIZE` environment variable is set to about half the memory
> 
> > > # available on the system and that the owner of the process is allowed to use this limit.
> 
> > > #
> 
> > > # Elasticsearch performs poorly when the system is swapping the memory.
> 
> > > ## ---------------------------------- Network -----------------------------------
> 
> > > #
> 
> > > # Set the bind address to a specific IP (IPv4 or IPv6):
> 
> > > #
> 
> > > # network.host: 192.168.0.1
> 
> > > network.host: 10.150.86.177
> 
> > > #
> 
> > > # Set a custom port for HTTP:
> 
> > > #
> 
> > > # http.port: 9200
> 
> > > #
> 
> > > # For more information, see the documentation at:
> 
> > > # \<[http://www.elastic.co/guide/en/elasticsearch/reference/current/modules-network.html](http://www.elastic.co/guide/en/elasticsearch/reference/current/modules-network.html)\>
> 
> > > #
> 
> > > # --------------------------------- Discovery ----------------------------------
> 
> > > #
> 
> > > # Pass an initial list of hosts to perform discovery when new node is started:
> 
> > > # The default list of hosts is [“127.0.0.1”, “[::1]”]
> 
> > > #
> 
> > > # discovery.zen.ping.unicast.hosts: [“host1”, “host2”]
> 
> > > #
> 
> > > # Prevent the “split brain” by configuring the majority of nodes (total number of nodes / 2 + 1):
> 
> > > #
> 
> > > # discovery.zen.minimum\_master\_nodes: 3
> 
> > > #
> 
> > > # For more information, see the documentation at:
> 
> > > # \<[http://www.elastic.co/guide/en/elasticsearch/reference/current/modules-discovery.html](http://www.elastic.co/guide/en/elasticsearch/reference/current/modules-discovery.html)\>
> 
> > > #
> 
> > > # ---------------------------------- Gateway -----------------------------------
> 
> > > #
> 
> > > # Block initial recovery after a full cluster restart until N nodes are started:
> 
> > > #
> 
> > > # gateway.recover\_after\_nodes: 3
> 
> > > #
> 
> > > # For more information, see the documentation at:
> 
> > > # \<[http://www.elastic.co/guide/en/elasticsearch/reference/current/modules-gateway.html](http://www.elastic.co/guide/en/elasticsearch/reference/current/modules-gateway.html)\>
> 
> > > #
> 
> > > # ---------------------------------- Various -----------------------------------
> 
> > > #
> 
> > > # Disable starting multiple nodes on a single system:
> 
> > > #
> 
> > > # node.max\_local\_storage\_nodes: 1
> 
> > > #
> 
> > > # Require explicit names when deleting indices:
> 
> > > #
> 
> > > # action.destructive\_requires\_name: true
> 
> > > searchguard.ssl.transport.keystore\_filepath: node-0-keystore.jks
> 
> > > searchguard.ssl.transport.keystore\_password: changeit
> 
> > > searchguard.ssl.transport.truststore\_filepath: truststore.jks
> 
> > > searchguard.ssl.transport.truststore\_password: changeit
> 
> > > searchguard.ssl.transport.enforce\_hostname\_verification: false
> 
> > > #searchguard.authcz.admin\_dn:
> 
> > > and the logs files of elastic search are
> 
> > > while running the command
> 
> > > ```auto
> > > ./sgadmin.sh -ts truststore.jks -ks kirk-keystore.jks -cd ../sgconfig -icl
> > > 
> > > ```
> > > 
> > > ```auto
> > > logs files generate the following error for this
> > > 
> > > ```
> > > 
> > > ```auto
> > > [2016-10-19 17:54:52,213][ERROR][com.floragunn.searchguard.ssl.transport	.SearchGuardSSLNettyTransport] [J2] SSL Problem Received fatal alert: certificate_unknown
> > > javax.net.ssl.SSLException: Received fatal alert: certificate_unknown
> > > at sun.security.ssl.Alerts.getSSL	Exception(Alerts.java:208)
> > > at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1666	)
> > > at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1634	)
> > > at sun.security.ssl.SSLEngineImpl.recvAlert(SSLEngineImpl.java:	1800)
> > > at sun.security.ssl.SSLEngineImpl.readRecord(SSLEngineImpl.java	:1083)
> > > at sun.security.ssl.SSLEngineImpl.readNetRecord(SSLEngineImpl.j	ava:907)
> > > at sun.security.ssl.SSLEngineImpl.unwrap(SSLEngineImpl.java:781	)
> > > at javax.net.ssl.SSLEngine.unwrap	(SSLEngine.java:624)
> > > at org.jboss.netty.handler.ssl.SslHandler.unwrap(SslHandler.jav	a:1219)
> > > at org.jboss.netty.handler.ssl.SslHandler.decode(SslHandler.jav	a:852)
> > > at org.jboss.netty.handler.codec.frame.FrameDecoder.callDecode(	FrameDecoder.java:425)
> > > at org.jboss.netty.handler.codec.frame.FrameDecoder.messageRece	ived(FrameDecoder.java:303)
> > > at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamH	andler.java:70)
> > > at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:56	4)
> > > at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:55	9)
> > > at org.jboss.netty.channel.Channels.fireMessageReceived(Channel	s.java:268)
> > > at org.jboss.netty.channel.Channels.fireMessageReceived(Channel	s.java:255)
> > > at org.jboss.netty.channel.socket.nio.NioWorker.read(NioWorker.	java:88)
> > > at org.jboss.netty.channel.socket.nio.AbstractNioWorker.process	(AbstractNioWorker.java:108)
> > > at org.jboss.netty.channel.socket.nio.AbstractNioSelector.run(A	bstractNioSelector.java:337)
> > > at org.jboss.netty.channel.socket.nio.AbstractNioWorker.run(Abs	tractNioWorker.java:89)
> > > at org.jboss.netty.channel.socket.nio.NioWorker.run(NioWorker.j	ava:178)
> > > at org.jboss.netty.util.ThreadRenamingRunnable.run(ThreadRenami	ngRunnable.java:108)
> > > at org.jboss.netty.util.internal.DeadLockProofWorker$1.run(Dead	LockProofWorker.java:42)
> > > at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPool	Executor.java:1142)
> > > at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoo	lExecutor.java:617)
> > > at java.lang.Thread.run(Thread.java:745)
> > > [2016-10-19 17:54:57,076][ERROR][com.floragunn.searchguard.ssl.transport	.SearchGuardSSLNettyTransport] [J2] SSL Problem Received fatal alert: certificate_unknown
> > > javax.net.ssl.SSLException: Received fatal alert: certificate_unknown
> > > at sun.security.ssl.Alerts.getSSL	Exception(Alerts.java:208)
> > > at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1666	)
> > > at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1634	)
> > > at sun.security.ssl.SSLEngineImpl.recvAlert(SSLEngineImpl.java:	1800)
> > > at sun.security.ssl.SSLEngineImpl.readRecord(SSLEngineImpl.java	:1083)
> > > at sun.security.ssl.SSLEngineImpl.readNetRecord(SSLEngineImpl.j	ava:907)
> > > at sun.security.ssl.SSLEngineImpl.unwrap(SSLEngineImpl.java:781	)
> > > at javax.net.ssl.SSLEngine.unwrap	(SSLEngine.java:624)
> > > at org.jboss.netty.handler.ssl.SslHandler.unwrap(SslHandler.jav	a:1219)
> > > at org.jboss.netty.handler.ssl.SslHandler.decode(SslHandler.jav	a:852)
> > > at org.jboss.netty.handler.codec.frame.FrameDecoder.callDecode(	FrameDecoder.java:425)
> > > at org.jboss.netty.handler.codec.frame.FrameDecoder.messageRece	ived(FrameDecoder.java:303)
> > > at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamH	andler.java:70)
> > > at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:56	4)
> > > at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:55	9)
> > > at org.jboss.netty.channel.Channels.fireMessageReceived(Channel	s.java:268)
> > > at org.jboss.netty.channel.Channels.fireMessageReceived(Channel	s.java:255)
> > > at org.jboss.netty.channel.socket.nio.NioWorker.read(NioWorker.	java:88)
> > > at org.jboss.netty.channel.socket.nio.AbstractNioWorker.process	(AbstractNioWorker.java:108)
> > > at org.jboss.netty.channel.socket.nio.AbstractNioSelector.run(A	bstractNioSelector.java:337)
> > > at org.jboss.netty.channel.socket.nio.AbstractNioWorker.run(Abs	tractNioWorker.java:89)
> > > at org.jboss.netty.channel.socket.nio.NioWorker.run(NioWorker.j	ava:178)
> > > at org.jboss.netty.util.ThreadRenamingRunnable.run(ThreadRenami	ngRunnable.java:108)
> > > at org.jboss.netty.util.internal.DeadLockProofWorker$1.run(Dead	LockProofWorker.java:42)
> > > at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPool	Executor.java:1142)
> > > at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoo	lExecutor.java:617)
> > > at java.lang.Thread.run(Thread.java:745)
> > > [2016-10-19 17:55:02,118][ERROR][com.floragunn.searchguard.ssl.transport	.SearchGuardSSLNettyTransport] [J2] SSL Problem Received fatal alert: certificate_unknown
> > > javax.net.ssl.SSLException: Received fatal alert: certificate_unknown
> > > at sun.security.ssl.Alerts.getSSL	Exception(Alerts.java:208)
> > > at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1666	)
> > > at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1634	)
> > > at sun.security.ssl.SSLEngineImpl.recvAlert(SSLEngineImpl.java:	1800)
> > > at sun.security.ssl.SSLEngineImpl.readRecord(SSLEngineImpl.java	:1083)
> > > at sun.security.ssl.SSLEngineImpl.readNetRecord(SSLEngineImpl.j	ava:907)
> > > at sun.security.ssl.SSLEngineImpl.unwrap(SSLEngineImpl.java:781	)
> > > at javax.net.ssl.SSLEngine.unwrap	(SSLEngine.java:624)
> > > at org.jboss.netty.handler.ssl.SslHandler.unwrap(SslHandler.jav	a:1219)
> > > at org.jboss.netty.handler.ssl.SslHandler.decode(SslHandler.jav	a:852)
> > > at org.jboss.netty.handler.codec.frame.FrameDecoder.callDecode(	FrameDecoder.java:425)
> > > at org.jboss.netty.handler.codec.frame.FrameDecoder.messageRece	ived(FrameDecoder.java:303)
> > > at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamH	andler.java:70)
> > > at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:56	4)
> > > at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:55	9)
> > > at org.jboss.netty.channel.Channels.fireMessageReceived(Channel	s.java:268)
> > > at org.jboss.netty.channel.Channels.fireMessageReceived(Channel	s.java:255)
> > > at org.jboss.netty.channel.socket.nio.NioWorker.read(NioWorker.	java:88)
> > > at org.jboss.netty.channel.socket.nio.AbstractNioWorker.process	(AbstractNioWorker.java:108)
> > > at org.jboss.netty.channel.socket.nio.AbstractNioSelector.run(A	bstractNioSelector.java:337)
> > > at org.jboss.netty.channel.socket.nio.AbstractNioWorker.run(Abs	tractNioWorker.java:89)
> > > at org.jboss.netty.channel.socket.nio.NioWorker.run(NioWorker.j	ava:178)
> > > at org.jboss.netty.util.ThreadRenamingRunnable.run(ThreadRenami	ngRunnable.java:108)
> > > at org.jboss.netty.util.internal.DeadLockProofWorker$1.run(Dead	LockProofWorker.java:42)
> > > at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPool	Executor.java:1142)
> > > at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoo	lExecutor.java:617)
> > > at java.lang.Thread.run(Thread.java:745)
> > > [2016-10-19 17:55:07,155][ERROR][com.floragunn.searchguard.ssl.transport	.SearchGuardSSLNettyTransport] [J2] SSL Problem Received fatal alert: certificate_unknown
> > > javax.net.ssl.SSLException: Received fatal alert: certificate_unknown
> > > at sun.security.ssl.Alerts.getSSL	Exception(Alerts.java:208)
> > > at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1666	)
> > > at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1634	)
> > > at sun.security.ssl.SSLEngineImpl.recvAlert(SSLEngineImpl.java:	1800)
> > > at sun.security.ssl.SSLEngineImpl.readRecord(SSLEngineImpl.java	:1083)
> > > at sun.security.ssl.SSLEngineImpl.readNetRecord(SSLEngineImpl.j	ava:907)
> > > at sun.security.ssl.SSLEngineImpl.unwrap(SSLEngineImpl.java:781	)
> > > at javax.net.ssl.SSLEngine.unwrap	(SSLEngine.java:624)
> > > at org.jboss.netty.handler.ssl.SslHandler.unwrap(SslHandler.jav	a:1219)
> > > at org.jboss.netty.handler.ssl.SslHandler.decode(SslHandler.jav	a:852)
> > > at org.jboss.netty.handler.codec.frame.FrameDecoder.callDecode(	FrameDecoder.java:425)
> > > at org.jboss.netty.handler.codec.frame.FrameDecoder.messageRece	ived(FrameDecoder.java:303)
> > > at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamH	andler.java:70)
> > > at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:56	4)
> > > at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:55	9)
> > > at org.jboss.netty.channel.Channels.fireMessageReceived(Channel	s.java:268)
> > > at org.jboss.netty.channel.Channels.fireMessageReceived(Channel	s.java:255)
> > > at org.jboss.netty.channel.socket.nio.NioWorker.read(NioWorker.	java:88)
> > > at org.jboss.netty.channel.socket.nio.AbstractNioWorker.process	(AbstractNioWorker.java:108)
> > > at org.jboss.netty.channel.socket.nio.AbstractNioSelector.run(A	bstractNioSelector.java:337)
> > > at org.jboss.netty.channel.socket.nio.AbstractNioWorker.run(Abs	tractNioWorker.java:89)
> > > at org.jboss.netty.channel.socket.nio.NioWorker.run(NioWorker.j	ava:178)
> > > at org.jboss.netty.util.ThreadRenamingRunnable.run(ThreadRenami	ngRunnable.java:108)
> > > at org.jboss.netty.util.internal.DeadLockProofWorker$1.run(Dead	LockProofWorker.java:42)
> > > at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPool	Executor.java:1142)
> > > at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoo	lExecutor.java:617)
> > > at java.lang.Thread.run(Thread.java:745)
> > > [2016-10-19 17:57:20,447][ERROR][com.floragunn.searchguard.ssl.transport	.SearchGuardSSLNettyTransport] [J2] SSL Problem Received fatal alert: certificate_unknown
> > > javax.net.ssl.SSLException: Received fatal alert: certificate_unknown
> > > at sun.security.ssl.Alerts.getSSL	Exception(Alerts.java:208)
> > > at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1666	)
> > > at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1634	)
> > > at sun.security.ssl.SSLEngineImpl.recvAlert(SSLEngineImpl.java:	1800)
> > > at sun.security.ssl.SSLEngineImpl.readRecord(SSLEngineImpl.java	:1083)
> > > at sun.security.ssl.SSLEngineImpl.readNetRecord(SSLEngineImpl.j	ava:907)
> > > at sun.security.ssl.SSLEngineImpl.unwrap(SSLEngineImpl.java:781	)
> > > at javax.net.ssl.SSLEngine.unwrap
> > > 
> > > ```