speaks transport plaintext instead of ssl, will close the channel

Search Guard
1

I am getting below error while starting elastic search using Search-Guard.

[2018-05-20T19:48:09,611][WARN ][c.f.s.s.t.SearchGuardSSLNettyTransport] [QArzkaV] Someone (??remoteaddress??) speaks transport plaintext instead of ssl, will close the channel

And elastic search is not getting up. What could be the issue ?

Search Guard: 6.2.4-22.1

Elasticsearch: 6.2.4

JDK: 1.8

In elastic search configuration following entry generated by search guard:

######## Start Search Guard Demo Configuration ########

WARNING: revise all the lines below before you go into production

searchguard.ssl.transport.pemcert_filepath: esnode.pem
searchguard.ssl.transport.pemkey_filepath: esnode-key.pem
searchguard.ssl.transport.pemtrustedcas_filepath: root-ca.pem
searchguard.ssl.transport.enforce_hostname_verification: false
searchguard.ssl.http.enabled: true
searchguard.ssl.http.pemcert_filepath: esnode.pem
searchguard.ssl.http.pemkey_filepath: esnode-key.pem
searchguard.ssl.http.pemtrustedcas_filepath: root-ca.pem
searchguard.allow_unsafe_democertificates: true
searchguard.allow_default_init_sgindex: true
searchguard.authcz.admin_dn:

  • CN=kirk,OU=client,O=client,L=test, C=de

searchguard.audit.type: internal_elasticsearch
searchguard.enable_snapshot_restore_privilege: true
searchguard.check_snapshot_restore_write_privileges: true
searchguard.restapi.roles_enabled: [“sg_all_access”]
cluster.routing.allocation.disk.threshold_enabled: false
discovery.zen.minimum_master_nodes: 1
node.max_local_storage_nodes: 3
######## End Search Guard Demo Configuration ########

It is a single node elastic search installed on Windows 7

Regards,

Rajib

2

Seems, the problem resolved after setting searchguard.ssl.http.enabled to false in the configuration file of elastic search.

···

On Sunday, May 20, 2018 at 7:58:49 PM UTC+5:30, Rajib Halder wrote:

I am getting below error while starting elastic search using Search-Guard.

[2018-05-20T19:48:09,611][WARN ][c.f.s.s.t.SearchGuardSSLNettyTransport] [QArzkaV] Someone (??remoteaddress??) speaks transport plaintext instead of ssl, will close the channel

And elastic search is not getting up. What could be the issue ?

Search Guard: 6.2.4-22.1

Elasticsearch: 6.2.4

JDK: 1.8

In elastic search configuration following entry generated by search guard:

######## Start Search Guard Demo Configuration ########

WARNING: revise all the lines below before you go into production

searchguard.ssl.transport.pemcert_filepath: esnode.pem
searchguard.ssl.transport.pemkey_filepath: esnode-key.pem
searchguard.ssl.transport.pemtrustedcas_filepath: root-ca.pem
searchguard.ssl.transport.enforce_hostname_verification: false
searchguard.ssl.http.enabled: true
searchguard.ssl.http.pemcert_filepath: esnode.pem
searchguard.ssl.http.pemkey_filepath: esnode-key.pem
searchguard.ssl.http.pemtrustedcas_filepath: root-ca.pem
searchguard.allow_unsafe_democertificates: true
searchguard.allow_default_init_sgindex: true
searchguard.authcz.admin_dn:

  • CN=kirk,OU=client,O=client,L=test, C=de

searchguard.audit.type: internal_elasticsearch
searchguard.enable_snapshot_restore_privilege: true
searchguard.check_snapshot_restore_write_privileges: true
searchguard.restapi.roles_enabled: [“sg_all_access”]
cluster.routing.allocation.disk.threshold_enabled: false
discovery.zen.minimum_master_nodes: 1
node.max_local_storage_nodes: 3
######## End Search Guard Demo Configuration ########

It is a single node elastic search installed on Windows 7

Regards,

Rajib