# Search Guard SSL installation setup

**URL:** <https://forum.search-guard.com/t/search-guard-ssl-installation-setup/301>\
**Category:** Search Guard\
**Created:** [October 17, 2016, 1:50pm UTC](https://forum.search-guard.com/t/search-guard-ssl-installation-setup/301 "2016-10-17T13:50:58Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Banu\_Priya](https://avatars.discourse-cdn.com/v4/letter/b/ce7236/32.png) [@Banu\_Priya](https://forum.search-guard.com/u/Banu_Priya)\
**Post date:** [October 17, 2016, 1:50pm UTC](https://forum.search-guard.com/t/search-guard-ssl-installation-setup/301/1 "2016-10-17T13:50:58Z")

</div>

After installing the “search guard SSL” and “search-guard-2” in elasticsearch 2.3.2 ,once installed i have tried starting elasticsearch after that i am receiving this error “Exception in thread “main” ElasticsearchException[searchguard.ssl.transport.keys  
tore\_filepath must be set if transport ssl is reqested.]” could somebody suggest on this

---

<div class="post-metadata">

**Author:** ![ZillaYT](https://avatars.discourse-cdn.com/v4/letter/z/4da419/32.png) [@ZillaYT](https://forum.search-guard.com/u/ZillaYT)\
**Post date:** [November 2, 2016, 3:04pm UTC](https://forum.search-guard.com/t/search-guard-ssl-installation-setup/301/2 "2016-11-02T15:04:22Z")

</div>

Did you add the line mention in the [SG SSL Configuration](https://github.com/floragunncom/search-guard-ssl-docs/blob/master/configuration.md) page to your elasticsearch.yml file?

> **···**
>
> On Monday, October 17, 2016 at 9:50:59 AM UTC-4, Banu Priya wrote:
> 
> > After installing the “search guard SSL” and “search-guard-2” in elasticsearch 2.3.2 ,once installed i have tried starting elasticsearch after that i am receiving this error “Exception in thread “main” ElasticsearchException[searchguard.ssl.transport.keys  
> > tore\_filepath must be set if transport ssl is reqested.]” could somebody suggest on this

---

<div class="post-metadata">

**Author:** ![ZillaYT](https://avatars.discourse-cdn.com/v4/letter/z/4da419/32.png) [@ZillaYT](https://forum.search-guard.com/u/ZillaYT)\
**Post date:** [November 2, 2016, 3:05pm UTC](https://forum.search-guard.com/t/search-guard-ssl-installation-setup/301/3 "2016-11-02T15:05:30Z")

</div>

I meant “lines” (multiple lines), not “line” (one line).

> **···**
>
> On Wednesday, November 2, 2016 at 11:04:23 AM UTC-4, ZillaYT wrote:
> 
> > Did you add the line mention in the [SG SSL Configuration](https://github.com/floragunncom/search-guard-ssl-docs/blob/master/configuration.md) page to your elasticsearch.yml file?
> > 
> > On Monday, October 17, 2016 at 9:50:59 AM UTC-4, Banu Priya wrote:
> > 
> > > After installing the “search guard SSL” and “search-guard-2” in elasticsearch 2.3.2 ,once installed i have tried starting elasticsearch after that i am receiving this error “Exception in thread “main” ElasticsearchException[searchguard.ssl.transport.keys  
> > > tore\_filepath must be set if transport ssl is reqested.]” could somebody suggest on this

---

<div class="post-metadata">

**Author:** ![1114](https://avatars.discourse-cdn.com/v4/letter/1/77aa72/32.png) [@1114](https://forum.search-guard.com/u/1114)\
**Post date:** [November 3, 2016, 1:30am UTC](https://forum.search-guard.com/t/search-guard-ssl-installation-setup/301/4 "2016-11-03T01:30:44Z")

</div>

Can I see your elasticsearch.yml ?

> **···**
>
> 2016-11-02 23:05 GMT+08:00 ZillaYT [zilla62@gmail.com](mailto:zilla62@gmail.com):
> 
> > I meant “lines” (multiple lines), not “line” (one line).
> > 
> > On Wednesday, November 2, 2016 at 11:04:23 AM UTC-4, ZillaYT wrote:
> > 
> > > Did you add the line mention in the [SG SSL Configuration](https://github.com/floragunncom/search-guard-ssl-docs/blob/master/configuration.md) page to your elasticsearch.yml file?
> > > 
> > > On Monday, October 17, 2016 at 9:50:59 AM UTC-4, Banu Priya wrote:
> > > 
> > > > After installing the “search guard SSL” and “search-guard-2” in elasticsearch 2.3.2 ,once installed i have tried starting elasticsearch after that i am receiving this error “Exception in thread “main” ElasticsearchException[searchguard.ssl.transport.keys  
> > > > tore\_filepath must be set if transport ssl is reqested.]” could somebody suggest on this
> 
> > –
> > 
> > You received this message because you are subscribed to the Google Groups “Search Guard” group.
> > 
> > To unsubscribe from this group and stop receiving emails from it, send an email to [search-guard+unsubscribe@googlegroups.com](mailto:search-guard+unsubscribe@googlegroups.com).
> > 
> > To post to this group, send email to [search-guard@googlegroups.com](mailto:search-guard@googlegroups.com).
> > 
> > To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/aebe168a-b7a2-4324-af1a-875e819525ba%40googlegroups.com](https://groups.google.com/d/msgid/search-guard/aebe168a-b7a2-4324-af1a-875e819525ba%40googlegroups.com?utm_medium=email&utm_source=footer).
> > 
> > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

---

<div class="post-metadata">

**Author:** ![ZillaYT](https://avatars.discourse-cdn.com/v4/letter/z/4da419/32.png) [@ZillaYT](https://forum.search-guard.com/u/ZillaYT)\
**Post date:** [November 3, 2016, 9:07pm UTC](https://forum.search-guard.com/t/search-guard-ssl-installation-setup/301/5 "2016-11-03T21:07:08Z")

</div>

These are the pertinent lines that all your SG nodes will need these lines in their elasticsearch.yml file. I generated my \*.jks files using the example scripts from the SG-SSL site.

# Enable SSL via Search Guard SSL plugin

# Enable HTTPS

searchguard.ssl.http.enabled: true  
searchguard.ssl.http.keystore\_filepath: your-node-keystore.jks  
searchguard.ssl.http.keystore\_password: keystore\_pw  
searchguard.ssl.http.truststore\_filepath: truststore.jks  
searchguard.ssl.http.truststore\_password: truststore\_pw

# Enable SSL between ES nodes

searchguard.ssl.transport.keystore\_filepath: your-node-keystore.jks  
searchguard.ssl.transport.keystore\_password: keystore\_pw  
searchguard.ssl.transport.truststore\_filepath: truststore.jks  
searchguard.ssl.transport.truststore\_password: truststore\_pw  
searchguard.ssl.transport.enforce\_hostname\_verification: false

# for Search Guard

searchguard.authcz.admin\_dn:

- “cn=kirk, ou=client, o=client, l=Your\_Location, c=US”

``

> **···**
>
> On Wednesday, November 2, 2016 at 9:30:45 PM UTC-4, 郭旭 wrote:
> 
> > Can I see your elasticsearch.yml ?
> 
> > 2016-11-02 23:05 GMT+08:00 ZillaYT [zil...@gmail.com](mailto:zil...@gmail.com):
> > 
> > > I meant “lines” (multiple lines), not “line” (one line).
> > > 
> > > On Wednesday, November 2, 2016 at 11:04:23 AM UTC-4, ZillaYT wrote:
> > > 
> > > > Did you add the line mention in the [SG SSL Configuration](https://github.com/floragunncom/search-guard-ssl-docs/blob/master/configuration.md) page to your elasticsearch.yml file?
> > > > 
> > > > On Monday, October 17, 2016 at 9:50:59 AM UTC-4, Banu Priya wrote:
> > > > 
> > > > > After installing the “search guard SSL” and “search-guard-2” in elasticsearch 2.3.2 ,once installed i have tried starting elasticsearch after that i am receiving this error “Exception in thread “main” ElasticsearchException[searchguard.ssl.transport.keys  
> > > > > tore\_filepath must be set if transport ssl is reqested.]” could somebody suggest on this
> 
> > > –
> > > 
> > > You received this message because you are subscribed to the Google Groups “Search Guard” group.
> > > 
> > > To unsubscribe from this group and stop receiving emails from it, send an email to [search-guard...@googlegroups.com](mailto:search-guard...@googlegroups.com).
> > > 
> > > To post to this group, send email to [search...@googlegroups.com](mailto:search...@googlegroups.com).
> > > 
> > > To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/aebe168a-b7a2-4324-af1a-875e819525ba%40googlegroups.com](https://groups.google.com/d/msgid/search-guard/aebe168a-b7a2-4324-af1a-875e819525ba%40googlegroups.com?utm_medium=email&utm_source=footer).
> > > 
> > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).
> 
> >
