Search Guard SSL installation setup

After installing the “search guard SSL” and “search-guard-2” in elasticsearch 2.3.2 ,once installed i have tried starting elasticsearch after that i am receiving this error “Exception in thread “main” ElasticsearchException[searchguard.ssl.transport.keys
tore_filepath must be set if transport ssl is reqested.]” could somebody suggest on this

Did you add the line mention in the SG SSL Configuration page to your elasticsearch.yml file?

···

On Monday, October 17, 2016 at 9:50:59 AM UTC-4, Banu Priya wrote:

After installing the “search guard SSL” and “search-guard-2” in elasticsearch 2.3.2 ,once installed i have tried starting elasticsearch after that i am receiving this error “Exception in thread “main” ElasticsearchException[searchguard.ssl.transport.keys
tore_filepath must be set if transport ssl is reqested.]” could somebody suggest on this

I meant “lines” (multiple lines), not “line” (one line).

···

On Wednesday, November 2, 2016 at 11:04:23 AM UTC-4, ZillaYT wrote:

Did you add the line mention in the SG SSL Configuration page to your elasticsearch.yml file?

On Monday, October 17, 2016 at 9:50:59 AM UTC-4, Banu Priya wrote:

After installing the “search guard SSL” and “search-guard-2” in elasticsearch 2.3.2 ,once installed i have tried starting elasticsearch after that i am receiving this error “Exception in thread “main” ElasticsearchException[searchguard.ssl.transport.keys
tore_filepath must be set if transport ssl is reqested.]” could somebody suggest on this

Can I see your elasticsearch.yml ?

···

2016-11-02 23:05 GMT+08:00 ZillaYT zilla62@gmail.com:

I meant “lines” (multiple lines), not “line” (one line).

On Wednesday, November 2, 2016 at 11:04:23 AM UTC-4, ZillaYT wrote:

Did you add the line mention in the SG SSL Configuration page to your elasticsearch.yml file?

On Monday, October 17, 2016 at 9:50:59 AM UTC-4, Banu Priya wrote:

After installing the “search guard SSL” and “search-guard-2” in elasticsearch 2.3.2 ,once installed i have tried starting elasticsearch after that i am receiving this error “Exception in thread “main” ElasticsearchException[searchguard.ssl.transport.keys
tore_filepath must be set if transport ssl is reqested.]” could somebody suggest on this

You received this message because you are subscribed to the Google Groups “Search Guard” group.

To unsubscribe from this group and stop receiving emails from it, send an email to search-guard+unsubscribe@googlegroups.com.

To post to this group, send email to search-guard@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/search-guard/aebe168a-b7a2-4324-af1a-875e819525ba%40googlegroups.com.

For more options, visit https://groups.google.com/d/optout.

These are the pertinent lines that all your SG nodes will need these lines in their elasticsearch.yml file. I generated my *.jks files using the example scripts from the SG-SSL site.

Enable SSL via Search Guard SSL plugin

Enable HTTPS

searchguard.ssl.http.enabled: true
searchguard.ssl.http.keystore_filepath: your-node-keystore.jks
searchguard.ssl.http.keystore_password: keystore_pw
searchguard.ssl.http.truststore_filepath: truststore.jks
searchguard.ssl.http.truststore_password: truststore_pw

Enable SSL between ES nodes

searchguard.ssl.transport.keystore_filepath: your-node-keystore.jks
searchguard.ssl.transport.keystore_password: keystore_pw
searchguard.ssl.transport.truststore_filepath: truststore.jks
searchguard.ssl.transport.truststore_password: truststore_pw
searchguard.ssl.transport.enforce_hostname_verification: false

for Search Guard

searchguard.authcz.admin_dn:

  • “cn=kirk, ou=client, o=client, l=Your_Location, c=US”

``

···

On Wednesday, November 2, 2016 at 9:30:45 PM UTC-4, 郭旭 wrote:

Can I see your elasticsearch.yml ?

2016-11-02 23:05 GMT+08:00 ZillaYT zil...@gmail.com:

I meant “lines” (multiple lines), not “line” (one line).

On Wednesday, November 2, 2016 at 11:04:23 AM UTC-4, ZillaYT wrote:

Did you add the line mention in the SG SSL Configuration page to your elasticsearch.yml file?

On Monday, October 17, 2016 at 9:50:59 AM UTC-4, Banu Priya wrote:

After installing the “search guard SSL” and “search-guard-2” in elasticsearch 2.3.2 ,once installed i have tried starting elasticsearch after that i am receiving this error “Exception in thread “main” ElasticsearchException[searchguard.ssl.transport.keys
tore_filepath must be set if transport ssl is reqested.]” could somebody suggest on this

You received this message because you are subscribed to the Google Groups “Search Guard” group.

To unsubscribe from this group and stop receiving emails from it, send an email to search-guard...@googlegroups.com.

To post to this group, send email to search...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/search-guard/aebe168a-b7a2-4324-af1a-875e819525ba%40googlegroups.com.

For more options, visit https://groups.google.com/d/optout.