# search-guard-ssl not SSLing

**URL:** <https://forum.search-guard.com/t/search-guard-ssl-not-ssling/340>\
**Category:** Search Guard\
**Created:** [December 17, 2016, 2:33am UTC](https://forum.search-guard.com/t/search-guard-ssl-not-ssling/340 "2016-12-17T02:33:12Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![pixelrebel](https://avatars.discourse-cdn.com/v4/letter/p/45deac/32.png) [@pixelrebel](https://forum.search-guard.com/u/pixelrebel)\
**Post date:** [December 17, 2016, 2:33am UTC](https://forum.search-guard.com/t/search-guard-ssl-not-ssling/340/1 "2016-12-17T02:33:12Z")

</div>

I’m trying to setup search-guard-ssl (2.4.1.7) on elasticsearch 2.4.1.

I’m having trouble here:

[https://github.com/floragunncom/search-guard-ssl-docs/blob/master/quickstart.md#testing-the-installation](https://github.com/floragunncom/search-guard-ssl-docs/blob/master/quickstart.md#testing-the-installation)

curl -s --noproxy 127.0.0.1 [http://127.0.0.1:9200/\_searchguard/sslinfo?pretty](http://127.0.0.1:9200/_searchguard/sslinfo?pretty)"  
{  
“principal” : null,  
“peer\_certificates” : “0”,  
“ssl\_protocol” : null,  
“ssl\_cipher” : null,  
“ssl\_openssl\_available” : false,  
“ssl\_openssl\_version” : -1,  
“ssl\_openssl\_version\_string” : null,  
“ssl\_openssl\_non\_available\_cause” : “java.lang.ClassNotFoundException: org.apache.tomcat.jni.SSL”,  
“ssl\_provider\_http” : null,  
“ssl\_provider\_transport\_server” : “JDK”,  
“ssl\_provider\_transport\_client” : “JDK”  
}

``

Earlier in the docs it says to ignore the tomcat warning, yet from this status output it seems that’s exactly what’s keeping this from working. Any tips?

---

<div class="post-metadata">

**Author:** ![pixelrebel](https://avatars.discourse-cdn.com/v4/letter/p/45deac/32.png) [@pixelrebel](https://forum.search-guard.com/u/pixelrebel)\
**Post date:** [December 17, 2016, 3:04am UTC](https://forum.search-guard.com/t/search-guard-ssl-not-ssling/340/2 "2016-12-17T03:04:49Z")

</div>

Followed instructions here to meet prerequisites.

[https://github.com/floragunncom/search-guard-ssl-docs/blob/master/openssl.md](https://github.com/floragunncom/search-guard-ssl-docs/blob/master/openssl.md)

---

<div class="post-metadata">

**Author:** ![searchguard\_google\_group](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/searchguard_google_group/32/462_2.png) [@searchguard\_google\_group](https://forum.search-guard.com/u/searchguard_google_group)\
**Post date:** [December 17, 2016, 8:19am UTC](https://forum.search-guard.com/t/search-guard-ssl-not-ssling/340/3 "2016-12-17T08:19:56Z")

</div>

I suggest to get it first working without openssl (in this case we use JDK built-in SSL).

Make sure you have set

searchguard.ssl.http.enabled: true

searchguard.ssl.http.keystore\_filepath: keystore\_file.jks

searchguard.ssl.http.truststore\_filepath: truststore\_file.jks

and then execute something like this:

curl -k -s --noproxy 127.0.0.1 https://[127.0.0.1:9200/\_searchguard/sslinfo?pretty](http://127.0.0.1:9200/_searchguard/sslinfo?pretty)"

If this is working we can get back to see why openssl might not be working.

First question here is whats your operating system?

Hope this helps

> **···**
>
> On Saturday, 17 December 2016 04:04:49 UTC+1, pixelrebel wrote:
> 
> > Followed instructions here to meet prerequisites.
> 
> > 
> 
> > [https://github.com/floragunncom/search-guard-ssl-docs/blob/master/openssl.md](https://github.com/floragunncom/search-guard-ssl-docs/blob/master/openssl.md)