# tools/sgadmin.sh - Error "no valid cipher suites for transport protocol"

**URL:** <https://forum.search-guard.com/t/tools-sgadmin-sh-error-no-valid-cipher-suites-for-transport-protocol/394>\
**Category:** Search Guard\
**Created:** [February 17, 2017, 8:10pm UTC](https://forum.search-guard.com/t/tools-sgadmin-sh-error-no-valid-cipher-suites-for-transport-protocol/394 "2017-02-17T20:10:55Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![Eliran\_Boraks](https://avatars.discourse-cdn.com/v4/letter/e/f14d63/32.png) [@Eliran\_Boraks](https://forum.search-guard.com/u/Eliran_Boraks)\
**Post date:** [February 17, 2017, 8:10pm UTC](https://forum.search-guard.com/t/tools-sgadmin-sh-error-no-valid-cipher-suites-for-transport-protocol/394/1 "2017-02-17T20:10:55Z")

</div>

I am trying to set-up the sgadmin, following this article [https://github.com/floragunncom/search-guard-docs/blob/master/sgadmin.md](https://github.com/floragunncom/search-guard-docs/blob/master/sgadmin.md)

When running the sgadmin tool I am getting the following. I do have the Java Cryptography Extension installed.

$ ./sgadmin.sh -ts truststore.jks -tspass changeit -ks kirk-keystore.jks -kspass changeit -cd …/sgconfig -icl -nhnv

Will connect to localhost:9300 … done

ERR: An unexpected ElasticsearchSecurityException occured: no valid cipher suites for transport protocol

Trace:

ElasticsearchSecurityException[no valid cipher suites for transport protocol]

```
at com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore.<init>(DefaultSearchGuardKeyStore.java:155)

at com.floragunn.searchguard.ssl.SearchGuardSSLModule.<init>(SearchGuardSSLModule.java:40)

at com.floragunn.searchguard.ssl.SearchGuardSSLPlugin.nodeModules(SearchGuardSSLPlugin.java:128)

at org.elasticsearch.plugins.PluginsService.nodeModules(PluginsService.java:263)

at org.elasticsearch.client.transport.TransportClient$Builder.build(TransportClient.java:141)

at com.floragunn.searchguard.tools.SearchGuardAdmin.main0(SearchGuardAdmin.java:315)

at com.floragunn.searchguard.tools.SearchGuardAdmin.main(SearchGuardAdmin.java:101)

```

Here is system setup:

ls -l /elasticsearch-2.4.3/plugins/search-guard-2/tools

-rw-rw-r–. 1 214 Feb 3 12:50 hash.bat

-rw-rw-r–. 1 197 Feb 3 12:50 hash.sh

-rw-rw-r–. 1 4423 Feb 17 12:56 kirk-keystore.jks

-rw-rw-r–. 1 222 Feb 3 12:50 sgadmin.bat

-rwxrwxrwx. 1 218 Feb 3 12:50 sgadmin.sh

-rw-rw-r–. 1 1096 Feb 17 12:56 truststore.jks

$ java -version

java version “1.8.0”

Java™ SE Runtime Environment (build pxa6480sr4-20170127\_01(SR4))

IBM J9 VM (build 2.8, JRE 1.8.0 Linux amd64-64 Compressed References 20170117\_333500 (JIT enabled, AOT enabled)

J9VM - R28\_20170117\_0200\_B333500

JIT - tr.r14.java.green\_20170115\_130932

GC - R28\_20170117\_0200\_B333500\_CMPRSS

J9CL - 20170117\_333500)

JCL - 20170125\_01 based on Oracle jdk8u121-b13

elasticsearch.yml:

searchguard.ssl.transport.keystore\_filepath: node-0-keystore.jks

searchguard.ssl.transport.keystore\_password: changeit

searchguard.ssl.transport.truststore\_filepath: truststore.jks

searchguard.ssl.transport.truststore\_password: changeit

searchguard.ssl.transport.enforce\_hostname\_verification: false

searchguard.authcz.admin\_dn: CN=kirk,OU=client,O=client,L=test, C=DE

“elasticsearch.yml” 135L, 4552C

Output of ES:

[2017-02-17 19:56:02,420][INFO][node] [Nekra] version[2.4.3], pid[1430], build[d38a34e/2016-12-07T16:28:56Z]

[2017-02-17 19:56:02,421][INFO][node] [Nekra] initializing …

[2017-02-17 19:56:03,226][INFO][com.floragunn.searchguard.ssl.SearchGuardSSLPlugin] Search Guard 2 plugin also available

[2017-02-17 19:56:03,245][INFO][com.floragunn.searchguard.SearchGuardPlugin] Clustername: elasticsearch

[2017-02-17 19:56:03,245][INFO][com.floragunn.searchguard.SearchGuardPlugin] Node [null] is a transportClient: false/tribeNode: false/tribeNodeClient: false

[2017-02-17 19:56:03,246][INFO][plugins] [Nekra] modules [reindex, lang-expression, lang-groovy], plugins [search-guard-ssl, search-guard-2], sites

[2017-02-17 19:56:03,278][INFO][env] [Nekra] using [1] data paths, mounts [[/ (rootfs)]], net usable\_space [5.6gb], net total\_space [9.9gb], spins? [unknown], types [rootfs]

[2017-02-17 19:56:03,278][INFO][env] [Nekra] heap size [1.9gb], compressed ordinary object pointers [true]

[2017-02-17 19:56:03,278][WARN][env] [Nekra] max file descriptors [4096] for elasticsearch process likely too low, consider increasing to at least [65536]

[2017-02-17 19:56:03,335][INFO][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] Open SSL not available (this is not an error, we simply fallback to built-in JDK SSL) because of java.lang.ClassNotFoundException: org.apache.tomcat.jni.SSL

[2017-02-17 19:56:03,780][INFO][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] Config directory is /opt/elastic/ElasticSearch/elasticsearch-2.4.3/config/, from there the key- and truststore files are resolved relatively

[2017-02-17 19:56:03,826][INFO][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] sslTransportClientProvider:JDK with ciphers [TLS\_ECDHE\_ECDSA\_WITH\_AES\_256\_CBC\_SHA384, TLS\_ECDHE\_RSA\_WITH\_AES\_256\_CBC\_SHA384, TLS\_DHE\_RSA\_WITH\_AES\_256\_CBC\_SHA256, TLS\_ECDHE\_ECDSA\_WITH\_AES\_256\_CBC\_SHA, TLS\_ECDHE\_RSA\_WITH\_AES\_256\_CBC\_SHA, TLS\_DHE\_RSA\_WITH\_AES\_256\_CBC\_SHA, TLS\_DHE\_DSS\_WITH\_AES\_256\_CBC\_SHA, TLS\_ECDHE\_ECDSA\_WITH\_AES\_128\_CBC\_SHA256, TLS\_ECDHE\_RSA\_WITH\_AES\_128\_CBC\_SHA256, TLS\_DHE\_RSA\_WITH\_AES\_128\_CBC\_SHA256, TLS\_DHE\_DSS\_WITH\_AES\_128\_CBC\_SHA256, TLS\_ECDHE\_ECDSA\_WITH\_AES\_128\_CBC\_SHA, TLS\_ECDHE\_RSA\_WITH\_AES\_128\_CBC\_SHA, TLS\_DHE\_RSA\_WITH\_AES\_128\_CBC\_SHA, TLS\_ECDHE\_ECDSA\_WITH\_AES\_256\_GCM\_SHA384, TLS\_ECDHE\_ECDSA\_WITH\_AES\_128\_GCM\_SHA256, TLS\_ECDHE\_RSA\_WITH\_AES\_256\_GCM\_SHA384, TLS\_DHE\_RSA\_WITH\_AES\_256\_GCM\_SHA384, TLS\_DHE\_DSS\_WITH\_AES\_256\_GCM\_SHA384, TLS\_ECDHE\_RSA\_WITH\_AES\_128\_GCM\_SHA256, TLS\_DHE\_RSA\_WITH\_AES\_128\_GCM\_SHA256, TLS\_DHE\_DSS\_WITH\_AES\_128\_GCM\_SHA256]

[2017-02-17 19:56:03,826][INFO][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] sslTransportServerProvider:JDK with ciphers [TLS\_ECDHE\_ECDSA\_WITH\_AES\_256\_CBC\_SHA384, TLS\_ECDHE\_RSA\_WITH\_AES\_256\_CBC\_SHA384, TLS\_DHE\_RSA\_WITH\_AES\_256\_CBC\_SHA256, TLS\_ECDHE\_ECDSA\_WITH\_AES\_256\_CBC\_SHA, TLS\_ECDHE\_RSA\_WITH\_AES\_256\_CBC\_SHA, TLS\_DHE\_RSA\_WITH\_AES\_256\_CBC\_SHA, TLS\_DHE\_DSS\_WITH\_AES\_256\_CBC\_SHA, TLS\_ECDHE\_ECDSA\_WITH\_AES\_128\_CBC\_SHA256, TLS\_ECDHE\_RSA\_WITH\_AES\_128\_CBC\_SHA256, TLS\_DHE\_RSA\_WITH\_AES\_128\_CBC\_SHA256, TLS\_DHE\_DSS\_WITH\_AES\_128\_CBC\_SHA256, TLS\_ECDHE\_ECDSA\_WITH\_AES\_128\_CBC\_SHA, TLS\_ECDHE\_RSA\_WITH\_AES\_128\_CBC\_SHA, TLS\_DHE\_RSA\_WITH\_AES\_128\_CBC\_SHA, TLS\_ECDHE\_ECDSA\_WITH\_AES\_256\_GCM\_SHA384, TLS\_ECDHE\_ECDSA\_WITH\_AES\_128\_GCM\_SHA256, TLS\_ECDHE\_RSA\_WITH\_AES\_256\_GCM\_SHA384, TLS\_DHE\_RSA\_WITH\_AES\_256\_GCM\_SHA384, TLS\_DHE\_DSS\_WITH\_AES\_256\_GCM\_SHA384, TLS\_ECDHE\_RSA\_WITH\_AES\_128\_GCM\_SHA256, TLS\_DHE\_RSA\_WITH\_AES\_128\_GCM\_SHA256, TLS\_DHE\_DSS\_WITH\_AES\_128\_GCM\_SHA256]

[2017-02-17 19:56:03,826][INFO][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] sslHTTPProvider:null with ciphers

[2017-02-17 19:56:03,826][INFO][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] sslTransport protocols [TLSv1.2, TLSv1.1]

[2017-02-17 19:56:03,826][INFO][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] sslHTTP protocols [TLSv1.2, TLSv1.1]

[2017-02-17 19:56:04,137][INFO][com.floragunn.searchguard.configuration.ConfigurationModule] FLS/DLS valve not bound (noop)

[2017-02-17 19:56:04,139][INFO][com.floragunn.searchguard.auditlog.AuditLogModule] Auditlog not available

[2017-02-17 19:56:04,304][INFO][transport] [Nekra] Using [com.floragunn.searchguard.transport.SearchGuardTransportService] as transport service, overridden by [search-guard2]

[2017-02-17 19:56:04,304][INFO][transport] [Nekra] Using [com.floragunn.searchguard.ssl.transport.SearchGuardSSLNettyTransport] as transport, overridden by [search-guard-ssl]

[2017-02-17 19:56:07,110][INFO][node] [Nekra] initialized

[2017-02-17 19:56:07,110][INFO][node] [Nekra] starting …

[2017-02-17 19:56:07,292][INFO][com.floragunn.searchguard.transport.SearchGuardTransportService] [Nekra] publish\_address {10.240.0.24:9300}, bound\_addresses {[::]:9300}

[2017-02-17 19:56:07,296][INFO][com.floragunn.searchguard.action.configupdate.TransportConfigUpdateAction] [Nekra] Check if searchguard index exists …

[2017-02-17 19:56:07,302][DEBUG][action.admin.indices.exists.indices] [Nekra] no known master node, scheduling a retry

[2017-02-17 19:56:07,308][INFO][discovery] [Nekra] elasticsearch/pRteXY99TWyxyGZtUAkBJQ

[2017-02-17 19:56:10,444][INFO][cluster.service] [Nekra] new\_master {Nekra}{pRteXY99TWyxyGZtUAkBJQ}{10.240.0.24}{10.240.0.24:9300}, reason: zen-disco-join(elected\_as\_master, [0] joins received)

[2017-02-17 19:56:10,508][INFO][http] [Nekra] publish\_address {10.240.0.24:9200}, bound\_addresses {[::]:9200}

[2017-02-17 19:56:10,508][INFO][node] [Nekra] started

[2017-02-17 19:56:10,527][INFO][gateway] [Nekra] recovered [0] indices into cluster\_state

[2017-02-17 19:56:10,528][INFO][com.floragunn.searchguard.action.configupdate.TransportConfigUpdateAction] [Nekra] searchguard index does not exist yet, so no need to load config on node startup. Use sgadmin to initialize cluster

---

<div class="post-metadata">

**Author:** ![searchguard\_google\_group](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/searchguard_google_group/32/462_2.png) [@searchguard\_google\_group](https://forum.search-guard.com/u/searchguard_google_group)\
**Post date:** [February 19, 2017, 4:56pm UTC](https://forum.search-guard.com/t/tools-sgadmin-sh-error-no-valid-cipher-suites-for-transport-protocol/394/2 "2017-02-19T16:56:02Z")

</div>

IBM J9 VM is not supported, pls. use OpenJDK or OracleJVM.  
If you would like to run it anyway try Search Guard v11 with Search Guard SSL v20, this might be working but no guarantee

> **···**
>
> On Friday, 17 February 2017 21:10:55 UTC+1, Eliran Boraks wrote:
> 
> > I am trying to set-up the sgadmin, following this article [https://github.com/floragunncom/search-guard-docs/blob/master/sgadmin.md](https://github.com/floragunncom/search-guard-docs/blob/master/sgadmin.md)
> 
> > 
> 
> > 
> 
> > When running the sgadmin tool I am getting the following. I do have the Java Cryptography Extension installed.
> 
> > 
> 
> > $ ./sgadmin.sh -ts truststore.jks -tspass changeit -ks kirk-keystore.jks -kspass changeit -cd …/sgconfig -icl -nhnv
> 
> > Will connect to localhost:9300 … done
> 
> > ERR: An unexpected ElasticsearchSecurityException occured: no valid cipher suites for transport protocol
> 
> > Trace:
> 
> > ElasticsearchSecurityException[no valid cipher suites for transport protocol]
> 
> > at com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore.(DefaultSearchGuardKeyStore.java:155)
> 
> > at com.floragunn.searchguard.ssl.SearchGuardSSLModule.(SearchGuardSSLModule.java:40)
> 
> > at com.floragunn.searchguard.ssl.SearchGuardSSLPlugin.nodeModules(SearchGuardSSLPlugin.java:128)
> 
> > at org.elasticsearch.plugins.PluginsService.nodeModules(PluginsService.java:263)
> 
> > at org.elasticsearch.client.transport.TransportClient$Builder.build(TransportClient.java:141)
> 
> > at com.floragunn.searchguard.tools.SearchGuardAdmin.main0(SearchGuardAdmin.java:315)
> 
> > at com.floragunn.searchguard.tools.SearchGuardAdmin.main(SearchGuardAdmin.java:101)
> 
> > 
> 
> > 
> 
> > Here is system setup:
> 
> > ls -l /elasticsearch-2.4.3/plugins/search-guard-2/tools
> 
> > -rw-rw-r–. 1 214 Feb 3 12:50 hash.bat
> 
> > -rw-rw-r–. 1 197 Feb 3 12:50 hash.sh
> 
> > -rw-rw-r–. 1 4423 Feb 17 12:56 kirk-keystore.jks
> 
> > -rw-rw-r–. 1 222 Feb 3 12:50 sgadmin.bat
> 
> > -rwxrwxrwx. 1 218 Feb 3 12:50 sgadmin.sh
> 
> > -rw-rw-r–. 1 1096 Feb 17 12:56 truststore.jks
> 
> > 
> 
> > $ java -version
> 
> > java version “1.8.0”
> 
> > Java™ SE Runtime Environment (build pxa6480sr4-20170127\_01(SR4))
> 
> > IBM J9 VM (build 2.8, JRE 1.8.0 Linux amd64-64 Compressed References 20170117\_333500 (JIT enabled, AOT enabled)
> 
> > J9VM - R28\_20170117\_0200\_B333500
> 
> > JIT - tr.r14.java.green\_20170115\_130932
> 
> > GC - R28\_20170117\_0200\_B333500\_CMPRSS
> 
> > J9CL - 20170117\_333500)
> 
> > JCL - 20170125\_01 based on Oracle jdk8u121-b13
> 
> > 
> 
> > elasticsearch.yml:
> 
> > searchguard.ssl.transport.keystore\_filepath: node-0-keystore.jks
> 
> > searchguard.ssl.transport.keystore\_password: changeit
> 
> > searchguard.ssl.transport.truststore\_filepath: truststore.jks
> 
> > searchguard.ssl.transport.truststore\_password: changeit
> 
> > searchguard.ssl.transport.enforce\_hostname\_verification: false
> 
> > 
> 
> > searchguard.authcz.admin\_dn: CN=kirk,OU=client,O=client,L=test, C=DE
> 
> > “elasticsearch.yml” 135L, 4552C
> 
> > 
> 
> > Output of ES:
> 
> > [2017-02-17 19:56:02,420][INFO][node] [Nekra] version[2.4.3], pid[1430], build[d38a34e/2016-12-07T16:28:56Z]
> 
> > [2017-02-17 19:56:02,421][INFO][node] [Nekra] initializing …
> 
> > [2017-02-17 19:56:03,226][INFO][com.floragunn.searchguard.ssl.SearchGuardSSLPlugin] Search Guard 2 plugin also available
> 
> > [2017-02-17 19:56:03,245][INFO][com.floragunn.searchguard.SearchGuardPlugin] Clustername: elasticsearch
> 
> > [2017-02-17 19:56:03,245][INFO][com.floragunn.searchguard.SearchGuardPlugin] Node [null] is a transportClient: false/tribeNode: false/tribeNodeClient: false
> 
> > [2017-02-17 19:56:03,246][INFO][plugins] [Nekra] modules [reindex, lang-expression, lang-groovy], plugins [search-guard-ssl, search-guard-2], sites
> 
> > [2017-02-17 19:56:03,278][INFO][env] [Nekra] using [1] data paths, mounts [[/ (rootfs)]], net usable\_space [5.6gb], net total\_space [9.9gb], spins? [unknown], types [rootfs]
> 
> > [2017-02-17 19:56:03,278][INFO][env] [Nekra] heap size [1.9gb], compressed ordinary object pointers [true]
> 
> > [2017-02-17 19:56:03,278][WARN][env] [Nekra] max file descriptors [4096] for elasticsearch process likely too low, consider increasing to at least [65536]
> 
> > [2017-02-17 19:56:03,335][INFO][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] Open SSL not available (this is not an error, we simply fallback to built-in JDK SSL) because of java.lang.ClassNotFoundException: org.apache.tomcat.jni.SSL
> 
> > [2017-02-17 19:56:03,780][INFO][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] Config directory is /opt/elastic/ElasticSearch/elasticsearch-2.4.3/config/, from there the key- and truststore files are resolved relatively
> 
> > [2017-02-17 19:56:03,826][INFO][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] sslTransportClientProvider:JDK with ciphers [TLS\_ECDHE\_ECDSA\_WITH\_AES\_256\_CBC\_SHA384, TLS\_ECDHE\_RSA\_WITH\_AES\_256\_CBC\_SHA384, TLS\_DHE\_RSA\_WITH\_AES\_256\_CBC\_SHA256, TLS\_ECDHE\_ECDSA\_WITH\_AES\_256\_CBC\_SHA, TLS\_ECDHE\_RSA\_WITH\_AES\_256\_CBC\_SHA, TLS\_DHE\_RSA\_WITH\_AES\_256\_CBC\_SHA, TLS\_DHE\_DSS\_WITH\_AES\_256\_CBC\_SHA, TLS\_ECDHE\_ECDSA\_WITH\_AES\_128\_CBC\_SHA256, TLS\_ECDHE\_RSA\_WITH\_AES\_128\_CBC\_SHA256, TLS\_DHE\_RSA\_WITH\_AES\_128\_CBC\_SHA256, TLS\_DHE\_DSS\_WITH\_AES\_128\_CBC\_SHA256, TLS\_ECDHE\_ECDSA\_WITH\_AES\_128\_CBC\_SHA, TLS\_ECDHE\_RSA\_WITH\_AES\_128\_CBC\_SHA, TLS\_DHE\_RSA\_WITH\_AES\_128\_CBC\_SHA, TLS\_ECDHE\_ECDSA\_WITH\_AES\_256\_GCM\_SHA384, TLS\_ECDHE\_ECDSA\_WITH\_AES\_128\_GCM\_SHA256, TLS\_ECDHE\_RSA\_WITH\_AES\_256\_GCM\_SHA384, TLS\_DHE\_RSA\_WITH\_AES\_256\_GCM\_SHA384, TLS\_DHE\_DSS\_WITH\_AES\_256\_GCM\_SHA384, TLS\_ECDHE\_RSA\_WITH\_AES\_128\_GCM\_SHA256, TLS\_DHE\_RSA\_WITH\_AES\_128\_GCM\_SHA256, TLS\_DHE\_DSS\_WITH\_AES\_128\_GCM\_SHA256]
> 
> > [2017-02-17 19:56:03,826][INFO][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] sslTransportServerProvider:JDK with ciphers [TLS\_ECDHE\_ECDSA\_WITH\_AES\_256\_CBC\_SHA384, TLS\_ECDHE\_RSA\_WITH\_AES\_256\_CBC\_SHA384, TLS\_DHE\_RSA\_WITH\_AES\_256\_CBC\_SHA256, TLS\_ECDHE\_ECDSA\_WITH\_AES\_256\_CBC\_SHA, TLS\_ECDHE\_RSA\_WITH\_AES\_256\_CBC\_SHA, TLS\_DHE\_RSA\_WITH\_AES\_256\_CBC\_SHA, TLS\_DHE\_DSS\_WITH\_AES\_256\_CBC\_SHA, TLS\_ECDHE\_ECDSA\_WITH\_AES\_128\_CBC\_SHA256, TLS\_ECDHE\_RSA\_WITH\_AES\_128\_CBC\_SHA256, TLS\_DHE\_RSA\_WITH\_AES\_128\_CBC\_SHA256, TLS\_DHE\_DSS\_WITH\_AES\_128\_CBC\_SHA256, TLS\_ECDHE\_ECDSA\_WITH\_AES\_128\_CBC\_SHA, TLS\_ECDHE\_RSA\_WITH\_AES\_128\_CBC\_SHA, TLS\_DHE\_RSA\_WITH\_AES\_128\_CBC\_SHA, TLS\_ECDHE\_ECDSA\_WITH\_AES\_256\_GCM\_SHA384, TLS\_ECDHE\_ECDSA\_WITH\_AES\_128\_GCM\_SHA256, TLS\_ECDHE\_RSA\_WITH\_AES\_256\_GCM\_SHA384, TLS\_DHE\_RSA\_WITH\_AES\_256\_GCM\_SHA384, TLS\_DHE\_DSS\_WITH\_AES\_256\_GCM\_SHA384, TLS\_ECDHE\_RSA\_WITH\_AES\_128\_GCM\_SHA256, TLS\_DHE\_RSA\_WITH\_AES\_128\_GCM\_SHA256, TLS\_DHE\_DSS\_WITH\_AES\_128\_GCM\_SHA256]
> 
> > [2017-02-17 19:56:03,826][INFO][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] sslHTTPProvider:null with ciphers
> 
> > [2017-02-17 19:56:03,826][INFO][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] sslTransport protocols [TLSv1.2, TLSv1.1]
> 
> > [2017-02-17 19:56:03,826][INFO][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] sslHTTP protocols [TLSv1.2, TLSv1.1]
> 
> > [2017-02-17 19:56:04,137][INFO][com.floragunn.searchguard.configuration.ConfigurationModule] FLS/DLS valve not bound (noop)
> 
> > [2017-02-17 19:56:04,139][INFO][com.floragunn.searchguard.auditlog.AuditLogModule] Auditlog not available
> 
> > [2017-02-17 19:56:04,304][INFO][transport] [Nekra] Using [com.floragunn.searchguard.transport.SearchGuardTransportService] as transport service, overridden by [search-guard2]
> 
> > [2017-02-17 19:56:04,304][INFO][transport] [Nekra] Using [com.floragunn.searchguard.ssl.transport.SearchGuardSSLNettyTransport] as transport, overridden by [search-guard-ssl]
> 
> > [2017-02-17 19:56:07,110][INFO][node] [Nekra] initialized
> 
> > [2017-02-17 19:56:07,110][INFO][node] [Nekra] starting …
> 
> > [2017-02-17 19:56:07,292][INFO][com.floragunn.searchguard.transport.SearchGuardTransportService] [Nekra] publish\_address {[10.240.0.24:9300](http://10.240.0.24:9300)}, bound\_addresses {[::]:9300}
> 
> > [2017-02-17 19:56:07,296][INFO][com.floragunn.searchguard.action.configupdate.TransportConfigUpdateAction] [Nekra] Check if searchguard index exists …
> 
> > [2017-02-17 19:56:07,302][DEBUG][action.admin.indices.exists.indices] [Nekra] no known master node, scheduling a retry
> 
> > [2017-02-17 19:56:07,308][INFO][discovery] [Nekra] elasticsearch/pRteXY99TWyxyGZtUAkBJQ
> 
> > [2017-02-17 19:56:10,444][INFO][cluster.service] [Nekra] new\_master {Nekra}{pRteXY99TWyxyGZtUAkBJQ}{10.240.0.24}{[10.240.0.24:9300](http://10.240.0.24:9300)}, reason: zen-disco-join(elected\_as\_master, [0] joins received)
> 
> > [2017-02-17 19:56:10,508][INFO][http] [Nekra] publish\_address {[10.240.0.24:9200](http://10.240.0.24:9200)}, bound\_addresses {[::]:9200}
> 
> > [2017-02-17 19:56:10,508][INFO][node] [Nekra] started
> 
> > [2017-02-17 19:56:10,527][INFO][gateway] [Nekra] recovered [0] indices into cluster\_state
> 
> > [2017-02-17 19:56:10,528][INFO][com.floragunn.searchguard.action.configupdate.TransportConfigUpdateAction] [Nekra] searchguard index does not exist yet, so no need to load config on node startup. Use sgadmin to initialize cluster
> 
> > 
> 
> > 
> 
> > 
> 
> > 
> 
> > 
> 
> >

---

<div class="post-metadata">

**Author:** ![Eliran\_Boraks](https://avatars.discourse-cdn.com/v4/letter/e/f14d63/32.png) [@Eliran\_Boraks](https://forum.search-guard.com/u/Eliran_Boraks)\
**Post date:** [February 20, 2017, 1:49pm UTC](https://forum.search-guard.com/t/tools-sgadmin-sh-error-no-valid-cipher-suites-for-transport-protocol/394/3 "2017-02-20T13:49:05Z")

</div>

That is interesting because I did download Oracle’s Java and I set it to JAVA\_HOME. I can’t change the underline Java since, I don’t have root.

That mean that ‘sgadmin.sh’ isn’t using the JAVA\_HOME?

Eliran

> **···**
>
> On Sun, Feb 19, 2017 at 11:56 AM, Search Guard [info@search-guard.com](mailto:info@search-guard.com) wrote:
> 
> > IBM J9 VM is not supported, pls. use OpenJDK or OracleJVM.  
> > If you would like to run it anyway try Search Guard v11 with Search Guard SSL v20, this might be working but no guarantee
> > 
> > On Friday, 17 February 2017 21:10:55 UTC+1, Eliran Boraks wrote:
> > 
> > > I am trying to set-up the sgadmin, following this article [https://github.com/floragunncom/search-guard-docs/blob/master/sgadmin.md](https://github.com/floragunncom/search-guard-docs/blob/master/sgadmin.md)
> 
> > >
> 
> > >
> 
> > > When running the sgadmin tool I am getting the following. I do have the Java Cryptography Extension installed.
> 
> > >
> 
> > > $ ./sgadmin.sh -ts truststore.jks -tspass changeit -ks kirk-keystore.jks -kspass changeit -cd …/sgconfig -icl -nhnv
> 
> > > Will connect to localhost:9300 … done
> 
> > > ERR: An unexpected ElasticsearchSecurityException occured: no valid cipher suites for transport protocol
> 
> > > Trace:
> 
> > > ElasticsearchSecurityException[no valid cipher suites for transport protocol]
> 
> > > ```
> > > at com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore.<init>(DefaultSearchGuardKeyStore.java:155)
> > > 
> > > ```
> 
> > > ```
> > > at com.floragunn.searchguard.ssl.SearchGuardSSLModule.<init>(SearchGuardSSLModule.java:40)
> > > 
> > > ```
> 
> > > ```
> > > at com.floragunn.searchguard.ssl.SearchGuardSSLPlugin.nodeModules(SearchGuardSSLPlugin.java:128)
> > > 
> > > ```
> 
> > > ```
> > > at org.elasticsearch.plugins.PluginsService.nodeModules(PluginsService.java:263)
> > > 
> > > ```
> 
> > > ```
> > > at org.elasticsearch.client.transport.TransportClient$Builder.build(TransportClient.java:141)
> > > 
> > > ```
> 
> > > ```
> > > at com.floragunn.searchguard.tools.SearchGuardAdmin.main0(SearchGuardAdmin.java:315)
> > > 
> > > ```
> 
> > > ```
> > > at com.floragunn.searchguard.tools.SearchGuardAdmin.main(SearchGuardAdmin.java:101)
> > > 
> > > ```
> 
> > >
> 
> > >
> 
> > > Here is system setup:
> 
> > > ls -l /elasticsearch-2.4.3/plugins/search-guard-2/tools
> 
> > > -rw-rw-r–. 1 214 Feb 3 12:50 hash.bat
> 
> > > -rw-rw-r–. 1 197 Feb 3 12:50 hash.sh
> 
> > > -rw-rw-r–. 1 4423 Feb 17 12:56 kirk-keystore.jks
> 
> > > -rw-rw-r–. 1 222 Feb 3 12:50 sgadmin.bat
> 
> > > -rwxrwxrwx. 1 218 Feb 3 12:50 sgadmin.sh
> 
> > > -rw-rw-r–. 1 1096 Feb 17 12:56 truststore.jks
> 
> > >
> 
> > > $ java -version
> 
> > > java version “1.8.0”
> 
> > > Java™ SE Runtime Environment (build pxa6480sr4-20170127\_01(SR4))
> 
> > > IBM J9 VM (build 2.8, JRE 1.8.0 Linux amd64-64 Compressed References 20170117\_333500 (JIT enabled, AOT enabled)
> 
> > > J9VM - R28\_20170117\_0200\_B333500
> 
> > > JIT - tr.r14.java.green\_20170115\_130932
> 
> > > GC - R28\_20170117\_0200\_B333500\_CMPRSS
> 
> > > J9CL - 20170117\_333500)
> 
> > > JCL - 20170125\_01 based on Oracle jdk8u121-b13
> 
> > >
> 
> > > elasticsearch.yml:
> 
> > > searchguard.ssl.transport.keystore\_filepath: node-0-keystore.jks
> 
> > > searchguard.ssl.transport.keystore\_password: changeit
> 
> > > searchguard.ssl.transport.truststore\_filepath: truststore.jks
> 
> > > searchguard.ssl.transport.truststore\_password: changeit
> 
> > > searchguard.ssl.transport.enforce\_hostname\_verification: false
> 
> > >
> 
> > > searchguard.authcz.admin\_dn: CN=kirk,OU=client,O=client,L=test, C=DE
> 
> > > “elasticsearch.yml” 135L, 4552C
> 
> > >
> 
> > > Output of ES:
> 
> > > [2017-02-17 19:56:02,420][INFO][node] [Nekra] version[2.4.3], pid[1430], build[d38a34e/2016-12-07T16:28:56Z]
> 
> > > [2017-02-17 19:56:02,421][INFO][node] [Nekra] initializing …
> 
> > > [2017-02-17 19:56:03,226][INFO][com.floragunn.searchguard.ssl.SearchGuardSSLPlugin] Search Guard 2 plugin also available
> 
> > > [2017-02-17 19:56:03,245][INFO][[com.floragunn.searchguard.Se](http://com.floragunn.searchguard.Se)archGuardPlugin] Clustername: elasticsearch
> 
> > > [2017-02-17 19:56:03,245][INFO][[com.floragunn.searchguard.Se](http://com.floragunn.searchguard.Se)archGuardPlugin] Node [null] is a transportClient: false/tribeNode: false/tribeNodeClient: false
> 
> > > [2017-02-17 19:56:03,246][INFO][plugins] [Nekra] modules [reindex, lang-expression, lang-groovy], plugins [search-guard-ssl, search-guard-2], sites
> 
> > > [2017-02-17 19:56:03,278][INFO][env] [Nekra] using [1] data paths, mounts [[/ (rootfs)]], net usable\_space [5.6gb], net total\_space [9.9gb], spins? [unknown], types [rootfs]
> 
> > > [2017-02-17 19:56:03,278][INFO][env] [Nekra] heap size [1.9gb], compressed ordinary object pointers [true]
> 
> > > [2017-02-17 19:56:03,278][WARN][env] [Nekra] max file descriptors [4096] for elasticsearch process likely too low, consider increasing to at least [65536]
> 
> > > [2017-02-17 19:56:03,335][INFO][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] Open SSL not available (this is not an error, we simply fallback to built-in JDK SSL) because of java.lang.ClassNotFoundException: org.apache.tomcat.jni.SSL
> 
> > > [2017-02-17 19:56:03,780][INFO][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] Config directory is /opt/elastic/ElasticSearch/elasticsearch-2.4.3/config/, from there the key- and truststore files are resolved relatively
> 
> > > [2017-02-17 19:56:03,826][INFO][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] sslTransportClientProvider:JDK with ciphers [TLS\_ECDHE\_ECDSA\_WITH\_AES\_256\_CBC\_SHA384, TLS\_ECDHE\_RSA\_WITH\_AES\_256\_CBC\_SHA384, TLS\_DHE\_RSA\_WITH\_AES\_256\_CBC\_SHA256, TLS\_ECDHE\_ECDSA\_WITH\_AES\_256\_CBC\_SHA, TLS\_ECDHE\_RSA\_WITH\_AES\_256\_CBC\_SHA, TLS\_DHE\_RSA\_WITH\_AES\_256\_CBC\_SHA, TLS\_DHE\_DSS\_WITH\_AES\_256\_CBC\_SHA, TLS\_ECDHE\_ECDSA\_WITH\_AES\_128\_CBC\_SHA256, TLS\_ECDHE\_RSA\_WITH\_AES\_128\_CBC\_SHA256, TLS\_DHE\_RSA\_WITH\_AES\_128\_CBC\_SHA256, TLS\_DHE\_DSS\_WITH\_AES\_128\_CBC\_SHA256, TLS\_ECDHE\_ECDSA\_WITH\_AES\_128\_CBC\_SHA, TLS\_ECDHE\_RSA\_WITH\_AES\_128\_CBC\_SHA, TLS\_DHE\_RSA\_WITH\_AES\_128\_CBC\_SHA, TLS\_ECDHE\_ECDSA\_WITH\_AES\_256\_GCM\_SHA384, TLS\_ECDHE\_ECDSA\_WITH\_AES\_128\_GCM\_SHA256, TLS\_ECDHE\_RSA\_WITH\_AES\_256\_GCM\_SHA384, TLS\_DHE\_RSA\_WITH\_AES\_256\_GCM\_SHA384, TLS\_DHE\_DSS\_WITH\_AES\_256\_GCM\_SHA384, TLS\_ECDHE\_RSA\_WITH\_AES\_128\_GCM\_SHA256, TLS\_DHE\_RSA\_WITH\_AES\_128\_GCM\_SHA256, TLS\_DHE\_DSS\_WITH\_AES\_128\_GCM\_SHA256]
> 
> > > [2017-02-17 19:56:03,826][INFO][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] sslTransportServerProvider:JDK with ciphers [TLS\_ECDHE\_ECDSA\_WITH\_AES\_256\_CBC\_SHA384, TLS\_ECDHE\_RSA\_WITH\_AES\_256\_CBC\_SHA384, TLS\_DHE\_RSA\_WITH\_AES\_256\_CBC\_SHA256, TLS\_ECDHE\_ECDSA\_WITH\_AES\_256\_CBC\_SHA, TLS\_ECDHE\_RSA\_WITH\_AES\_256\_CBC\_SHA, TLS\_DHE\_RSA\_WITH\_AES\_256\_CBC\_SHA, TLS\_DHE\_DSS\_WITH\_AES\_256\_CBC\_SHA, TLS\_ECDHE\_ECDSA\_WITH\_AES\_128\_CBC\_SHA256, TLS\_ECDHE\_RSA\_WITH\_AES\_128\_CBC\_SHA256, TLS\_DHE\_RSA\_WITH\_AES\_128\_CBC\_SHA256, TLS\_DHE\_DSS\_WITH\_AES\_128\_CBC\_SHA256, TLS\_ECDHE\_ECDSA\_WITH\_AES\_128\_CBC\_SHA, TLS\_ECDHE\_RSA\_WITH\_AES\_128\_CBC\_SHA, TLS\_DHE\_RSA\_WITH\_AES\_128\_CBC\_SHA, TLS\_ECDHE\_ECDSA\_WITH\_AES\_256\_GCM\_SHA384, TLS\_ECDHE\_ECDSA\_WITH\_AES\_128\_GCM\_SHA256, TLS\_ECDHE\_RSA\_WITH\_AES\_256\_GCM\_SHA384, TLS\_DHE\_RSA\_WITH\_AES\_256\_GCM\_SHA384, TLS\_DHE\_DSS\_WITH\_AES\_256\_GCM\_SHA384, TLS\_ECDHE\_RSA\_WITH\_AES\_128\_GCM\_SHA256, TLS\_DHE\_RSA\_WITH\_AES\_128\_GCM\_SHA256, TLS\_DHE\_DSS\_WITH\_AES\_128\_GCM\_SHA256]
> 
> > > [2017-02-17 19:56:03,826][INFO][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] sslHTTPProvider:null with ciphers
> 
> > > [2017-02-17 19:56:03,826][INFO][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] sslTransport protocols [TLSv1.2, TLSv1.1]
> 
> > > [2017-02-17 19:56:03,826][INFO][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] sslHTTP protocols [TLSv1.2, TLSv1.1]
> 
> > > [2017-02-17 19:56:04,137][INFO][[com.floragunn.searchguard.co](http://com.floragunn.searchguard.co)nfiguration.ConfigurationModule] FLS/DLS valve not bound (noop)
> 
> > > [2017-02-17 19:56:04,139][INFO][[com.floragunn.searchguard.au](http://com.floragunn.searchguard.au)ditlog.AuditLogModule] Auditlog not available
> 
> > > [2017-02-17 19:56:04,304][INFO][transport] [Nekra] Using [com.floragunn.searchguard.transport.SearchGuardTransportService] as transport service, overridden by [search-guard2]
> 
> > > [2017-02-17 19:56:04,304][INFO][transport] [Nekra] Using [com.floragunn.searchguard.ssl.transport.SearchGuardSSLNettyTransport] as transport, overridden by [search-guard-ssl]
> 
> > > [2017-02-17 19:56:07,110][INFO][node] [Nekra] initialized
> 
> > > [2017-02-17 19:56:07,110][INFO][node] [Nekra] starting …
> 
> > > [2017-02-17 19:56:07,292][INFO][[com.floragunn.searchguard.tr](http://com.floragunn.searchguard.tr)ansport.SearchGuardTransportService] [Nekra] publish\_address {[10.240.0.24:9300](http://10.240.0.24:9300)}, bound\_addresses {[::]:9300}
> 
> > > [2017-02-17 19:56:07,296][INFO][[com.floragunn.searchguard.ac](http://com.floragunn.searchguard.ac)tion.configupdate.TransportConfigUpdateAction] [Nekra] Check if searchguard index exists …
> 
> > > [2017-02-17 19:56:07,302][DEBUG][[action.ad](http://action.ad)min.indices.exists.indices] [Nekra] no known master node, scheduling a retry
> 
> > > [2017-02-17 19:56:07,308][INFO][discovery] [Nekra] elasticsearch/pRteXY99TWyxyGZtUAkBJQ
> 
> > > [2017-02-17 19:56:10,444][INFO][cluster.service] [Nekra] new\_master {Nekra}{pRteXY99TWyxyGZtUAkBJQ}{10.240.0.24}{[10.240.0.24:9300](http://10.240.0.24:9300)}, reason: zen-disco-join(elected\_as\_master, [0] joins received)
> 
> > > [2017-02-17 19:56:10,508][INFO][http] [Nekra] publish\_address {[10.240.0.24:9200](http://10.240.0.24:9200)}, bound\_addresses {[::]:9200}
> 
> > > [2017-02-17 19:56:10,508][INFO][node] [Nekra] started
> 
> > > [2017-02-17 19:56:10,527][INFO][gateway] [Nekra] recovered [0] indices into cluster\_state
> 
> > > [2017-02-17 19:56:10,528][INFO][[com.floragunn.searchguard.ac](http://com.floragunn.searchguard.ac)tion.configupdate.TransportConfigUpdateAction] [Nekra] searchguard index does not exist yet, so no need to load config on node startup. Use sgadmin to initialize cluster
> 
> > >
> 
> > >
> 
> > >
> 
> > >
> 
> > >
> 
> > >
> 
> > –
> > 
> > You received this message because you are subscribed to a topic in the Google Groups “Search Guard” group.
> > 
> > To unsubscribe from this topic, visit [https://groups.google.com/d/topic/search-guard/4NzDbF2X6Mo/unsubscribe](https://groups.google.com/d/topic/search-guard/4NzDbF2X6Mo/unsubscribe).
> > 
> > To unsubscribe from this group and all its topics, send an email to [search-guard+unsubscribe@googlegroups.com](mailto:search-guard+unsubscribe@googlegroups.com).
> > 
> > To post to this group, send email to [search-guard@googlegroups.com](mailto:search-guard@googlegroups.com).
> > 
> > To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/ae3029fc-9b0b-4e14-89ba-8ef80cec8172%40googlegroups.com](https://groups.google.com/d/msgid/search-guard/ae3029fc-9b0b-4e14-89ba-8ef80cec8172%40googlegroups.com?utm_medium=email&utm_source=footer).
> > 
> > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).
> 
> –
> 
> Keep in touch
> 
> [Twitter](http://twitter.com/#!/eboraks)  
> [LinkedIn](http://www.linkedin.com/pub/eliran-boraks/1/940/657)
> 
> [Facebook](http://www.facebook.com/eliran.boraks)

---

<div class="post-metadata">

**Author:** ![searchguard\_google\_group](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/searchguard_google_group/32/462_2.png) [@searchguard\_google\_group](https://forum.search-guard.com/u/searchguard_google_group)\
**Post date:** [February 20, 2017, 1:52pm UTC](https://forum.search-guard.com/t/tools-sgadmin-sh-error-no-valid-cipher-suites-for-transport-protocol/394/4 "2017-02-20T13:52:37Z")

</div>

you can look into sgadmin.sh to see how it works

> **···**
>
> > Am 20.02.2017 um 14:49 schrieb Eliran Boraks \<eboraks@gmail.com\>:
> > 
> > That is interesting because I did download Oracle's Java and I set it to JAVA\_HOME. I can't change the underline Java since, I don't have root.
> > 
> > That mean that 'sgadmin.sh' isn't using the JAVA\_HOME?
> > 
> > Eliran
> > 
> > On Sun, Feb 19, 2017 at 11:56 AM, Search Guard \<info@search-guard.com\> wrote:  
> > IBM J9 VM is not supported, pls. use OpenJDK or OracleJVM.  
> > If you would like to run it anyway try Search Guard v11 with Search Guard SSL v20, this might be working but no guarantee
> > 
> > On Friday, 17 February 2017 21:10:55 UTC+1, Eliran Boraks wrote:  
> > I am trying to set-up the sgadmin, following this article [https://github.com/floragunncom/search-guard-docs/blob/master/sgadmin.md](https://github.com/floragunncom/search-guard-docs/blob/master/sgadmin.md)
> > 
> > When running the sgadmin tool I am getting the following. I do have the Java Cryptography Extension installed.
> > 
> > $ ./sgadmin.sh -ts truststore.jks -tspass changeit -ks kirk-keystore.jks -kspass changeit -cd ../sgconfig -icl -nhnv  
> > Will connect to localhost:9300 ... done  
> > ERR: An unexpected ElasticsearchSecurityException occured: no valid cipher suites for transport protocol  
> > Trace:  
> > ElasticsearchSecurityException[no valid cipher suites for transport protocol]  
> > &nbsp;&nbsp;at com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore.\<init\>(DefaultSearchGuardKeyStore.java:155)  
> > &nbsp;&nbsp;at com.floragunn.searchguard.ssl.SearchGuardSSLModule.\<init\>(SearchGuardSSLModule.java:40)  
> > &nbsp;&nbsp;at com.floragunn.searchguard.ssl.SearchGuardSSLPlugin.nodeModules(SearchGuardSSLPlugin.java:128)  
> > &nbsp;&nbsp;at org.elasticsearch.plugins.PluginsService.nodeModules(PluginsService.java:263)  
> > &nbsp;&nbsp;at org.elasticsearch.client.transport.TransportClient$Builder.build(TransportClient.java:141)  
> > &nbsp;&nbsp;at com.floragunn.searchguard.tools.SearchGuardAdmin.main0(SearchGuardAdmin.java:315)  
> > &nbsp;&nbsp;at com.floragunn.searchguard.tools.SearchGuardAdmin.main(SearchGuardAdmin.java:101)
> > 
> > Here is system setup:  
> > ls -l /elasticsearch-2.4.3/plugins/search-guard-2/tools  
> > -rw-rw-r--. 1 214 Feb 3 12:50 hash.bat  
> > -rw-rw-r--. 1 197 Feb 3 12:50 hash.sh  
> > -rw-rw-r--. 1 4423 Feb 17 12:56 kirk-keystore.jks  
> > -rw-rw-r--. 1 222 Feb 3 12:50 sgadmin.bat  
> > -rwxrwxrwx. 1 218 Feb 3 12:50 sgadmin.sh  
> > -rw-rw-r--. 1 1096 Feb 17 12:56 truststore.jks
> > 
> > $ java -version  
> > java version "1.8.0"  
> > Java(TM) SE Runtime Environment (build pxa6480sr4-20170127\_01(SR4))  
> > IBM J9 VM (build 2.8, JRE 1.8.0 Linux amd64-64 Compressed References 20170117\_333500 (JIT enabled, AOT enabled)  
> > J9VM - R28\_20170117\_0200\_B333500  
> > JIT - tr.r14.java.green\_20170115\_130932  
> > GC - R28\_20170117\_0200\_B333500\_CMPRSS  
> > J9CL - 20170117\_333500)  
> > JCL - 20170125\_01 based on Oracle jdk8u121-b13
> > 
> > elasticsearch.yml:  
> > searchguard.ssl.transport.keystore\_filepath: node-0-keystore.jks  
> > searchguard.ssl.transport.keystore\_password: changeit  
> > searchguard.ssl.transport.truststore\_filepath: truststore.jks  
> > searchguard.ssl.transport.truststore\_password: changeit  
> > searchguard.ssl.transport.enforce\_hostname\_verification: false
> > 
> > searchguard.authcz.admin\_dn: CN=kirk,OU=client,O=client,L=test, C=DE  
> > "elasticsearch.yml" 135L, 4552C
> > 
> > Output of ES:  
> > [2017-02-17 19:56:02,420][INFO][node] [Nekra] version[2.4.3], pid[1430], build[d38a34e/2016-12-07T16:28:56Z]  
> > [2017-02-17 19:56:02,421][INFO][node] [Nekra] initializing ...  
> > [2017-02-17 19:56:03,226][INFO][com.floragunn.searchguard.ssl.SearchGuardSSLPlugin] Search Guard 2 plugin also available  
> > [2017-02-17 19:56:03,245][INFO][com.floragunn.searchguard.SearchGuardPlugin] Clustername: elasticsearch  
> > [2017-02-17 19:56:03,245][INFO][com.floragunn.searchguard.SearchGuardPlugin] Node [null] is a transportClient: false/tribeNode: false/tribeNodeClient: false  
> > [2017-02-17 19:56:03,246][INFO][plugins] [Nekra] modules [reindex, lang-expression, lang-groovy], plugins [search-guard-ssl, search-guard-2], sites   
> > [2017-02-17 19:56:03,278][INFO][env] [Nekra] using [1] data paths, mounts [[/ (rootfs)]], net usable\_space [5.6gb], net total\_space [9.9gb], spins? [unknown], types [rootfs]  
> > [2017-02-17 19:56:03,278][INFO][env] [Nekra] heap size [1.9gb], compressed ordinary object pointers [true]  
> > [2017-02-17 19:56:03,278][WARN][env] [Nekra] max file descriptors [4096] for elasticsearch process likely too low, consider increasing to at least [65536]  
> > [2017-02-17 19:56:03,335][INFO][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] Open SSL not available (this is not an error, we simply fallback to built-in JDK SSL) because of java.lang.ClassNotFoundException: org.apache.tomcat.jni.SSL  
> > [2017-02-17 19:56:03,780][INFO][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] Config directory is /opt/elastic/ElasticSearch/elasticsearch-2.4.3/config/, from there the key- and truststore files are resolved relatively  
> > [2017-02-17 19:56:03,826][INFO][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] sslTransportClientProvider:JDK with ciphers [TLS\_ECDHE\_ECDSA\_WITH\_AES\_256\_CBC\_SHA384, TLS\_ECDHE\_RSA\_WITH\_AES\_256\_CBC\_SHA384, TLS\_DHE\_RSA\_WITH\_AES\_256\_CBC\_SHA256, TLS\_ECDHE\_ECDSA\_WITH\_AES\_256\_CBC\_SHA, TLS\_ECDHE\_RSA\_WITH\_AES\_256\_CBC\_SHA, TLS\_DHE\_RSA\_WITH\_AES\_256\_CBC\_SHA, TLS\_DHE\_DSS\_WITH\_AES\_256\_CBC\_SHA, TLS\_ECDHE\_ECDSA\_WITH\_AES\_128\_CBC\_SHA256, TLS\_ECDHE\_RSA\_WITH\_AES\_128\_CBC\_SHA256, TLS\_DHE\_RSA\_WITH\_AES\_128\_CBC\_SHA256, TLS\_DHE\_DSS\_WITH\_AES\_128\_CBC\_SHA256, TLS\_ECDHE\_ECDSA\_WITH\_AES\_128\_CBC\_SHA, TLS\_ECDHE\_RSA\_WITH\_AES\_128\_CBC\_SHA, TLS\_DHE\_RSA\_WITH\_AES\_128\_CBC\_SHA, TLS\_ECDHE\_ECDSA\_WITH\_AES\_256\_GCM\_SHA384, TLS\_ECDHE\_ECDSA\_WITH\_AES\_128\_GCM\_SHA256, TLS\_ECDHE\_RSA\_WITH\_AES\_256\_GCM\_SHA384, TLS\_DHE\_RSA\_WITH\_AES\_256\_GCM\_SHA384, TLS\_DHE\_DSS\_WITH\_AES\_256\_GCM\_SHA384, TLS\_ECDHE\_RSA\_WITH\_AES\_128\_GCM\_SHA256, TLS\_DHE\_RSA\_WITH\_AES\_128\_GCM\_SHA256, TLS\_DHE\_DSS\_WITH\_AES\_128\_GCM\_SHA256]  
> > [2017-02-17 19:56:03,826][INFO][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] sslTransportServerProvider:JDK with ciphers [TLS\_ECDHE\_ECDSA\_WITH\_AES\_256\_CBC\_SHA384, TLS\_ECDHE\_RSA\_WITH\_AES\_256\_CBC\_SHA384, TLS\_DHE\_RSA\_WITH\_AES\_256\_CBC\_SHA256, TLS\_ECDHE\_ECDSA\_WITH\_AES\_256\_CBC\_SHA, TLS\_ECDHE\_RSA\_WITH\_AES\_256\_CBC\_SHA, TLS\_DHE\_RSA\_WITH\_AES\_256\_CBC\_SHA, TLS\_DHE\_DSS\_WITH\_AES\_256\_CBC\_SHA, TLS\_ECDHE\_ECDSA\_WITH\_AES\_128\_CBC\_SHA256, TLS\_ECDHE\_RSA\_WITH\_AES\_128\_CBC\_SHA256, TLS\_DHE\_RSA\_WITH\_AES\_128\_CBC\_SHA256, TLS\_DHE\_DSS\_WITH\_AES\_128\_CBC\_SHA256, TLS\_ECDHE\_ECDSA\_WITH\_AES\_128\_CBC\_SHA, TLS\_ECDHE\_RSA\_WITH\_AES\_128\_CBC\_SHA, TLS\_DHE\_RSA\_WITH\_AES\_128\_CBC\_SHA, TLS\_ECDHE\_ECDSA\_WITH\_AES\_256\_GCM\_SHA384, TLS\_ECDHE\_ECDSA\_WITH\_AES\_128\_GCM\_SHA256, TLS\_ECDHE\_RSA\_WITH\_AES\_256\_GCM\_SHA384, TLS\_DHE\_RSA\_WITH\_AES\_256\_GCM\_SHA384, TLS\_DHE\_DSS\_WITH\_AES\_256\_GCM\_SHA384, TLS\_ECDHE\_RSA\_WITH\_AES\_128\_GCM\_SHA256, TLS\_DHE\_RSA\_WITH\_AES\_128\_GCM\_SHA256, TLS\_DHE\_DSS\_WITH\_AES\_128\_GCM\_SHA256]  
> > [2017-02-17 19:56:03,826][INFO][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] sslHTTPProvider:null with ciphers   
> > [2017-02-17 19:56:03,826][INFO][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] sslTransport protocols [TLSv1.2, TLSv1.1]  
> > [2017-02-17 19:56:03,826][INFO][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] sslHTTP protocols [TLSv1.2, TLSv1.1]  
> > [2017-02-17 19:56:04,137][INFO][com.floragunn.searchguard.configuration.ConfigurationModule] FLS/DLS valve not bound (noop)  
> > [2017-02-17 19:56:04,139][INFO][com.floragunn.searchguard.auditlog.AuditLogModule] Auditlog not available  
> > [2017-02-17 19:56:04,304][INFO][transport] [Nekra] Using [com.floragunn.searchguard.transport.SearchGuardTransportService] as transport service, overridden by [search-guard2]  
> > [2017-02-17 19:56:04,304][INFO][transport] [Nekra] Using [com.floragunn.searchguard.ssl.transport.SearchGuardSSLNettyTransport] as transport, overridden by [search-guard-ssl]  
> > [2017-02-17 19:56:07,110][INFO][node] [Nekra] initialized  
> > [2017-02-17 19:56:07,110][INFO][node] [Nekra] starting ...  
> > [2017-02-17 19:56:07,292][INFO][com.floragunn.searchguard.transport.SearchGuardTransportService] [Nekra] publish\_address {10.240.0.24:9300}, bound\_addresses {[::]:9300}  
> > [2017-02-17 19:56:07,296][INFO][com.floragunn.searchguard.action.configupdate.TransportConfigUpdateAction] [Nekra] Check if searchguard index exists ...  
> > [2017-02-17 19:56:07,302][DEBUG][action.admin.indices.exists.indices] [Nekra] no known master node, scheduling a retry  
> > [2017-02-17 19:56:07,308][INFO][discovery] [Nekra] elasticsearch/pRteXY99TWyxyGZtUAkBJQ  
> > [2017-02-17 19:56:10,444][INFO][cluster.service] [Nekra] new\_master {Nekra}{pRteXY99TWyxyGZtUAkBJQ}{10.240.0.24}{10.240.0.24:9300}, reason: zen-disco-join(elected\_as\_master, [0] joins received)  
> > [2017-02-17 19:56:10,508][INFO][http] [Nekra] publish\_address {10.240.0.24:9200}, bound\_addresses {[::]:9200}  
> > [2017-02-17 19:56:10,508][INFO][node] [Nekra] started  
> > [2017-02-17 19:56:10,527][INFO][gateway] [Nekra] recovered [0] indices into cluster\_state  
> > [2017-02-17 19:56:10,528][INFO][com.floragunn.searchguard.action.configupdate.TransportConfigUpdateAction] [Nekra] searchguard index does not exist yet, so no need to load config on node startup. Use sgadmin to initialize cluster
> > 
> > --  
> > You received this message because you are subscribed to a topic in the Google Groups "Search Guard" group.  
> > To unsubscribe from this topic, visit [https://groups.google.com/d/topic/search-guard/4NzDbF2X6Mo/unsubscribe\](https://groups.google.com/d/topic/search-guard/4NzDbF2X6Mo/unsubscribe%5C).  
> > To unsubscribe from this group and all its topics, send an email to search-guard+unsubscribe@googlegroups.com.  
> > To post to this group, send email to search-guard@googlegroups.com.  
> > To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/ae3029fc-9b0b-4e14-89ba-8ef80cec8172%40googlegroups.com\](https://groups.google.com/d/msgid/search-guard/ae3029fc-9b0b-4e14-89ba-8ef80cec8172%40googlegroups.com%5C).  
> > For more options, visit [https://groups.google.com/d/optout\](https://groups.google.com/d/optout%5C).
> > 
> > --  
> > Keep in touch  
> > Twitter  
> > LinkedIn  
> > Facebook
> > 
> > --  
> > You received this message because you are subscribed to the Google Groups "Search Guard" group.  
> > To unsubscribe from this group and stop receiving emails from it, send an email to search-guard+unsubscribe@googlegroups.com.  
> > To post to this group, send email to search-guard@googlegroups.com.  
> > To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/CAAn%2BYTP8s3emsXvjHTPqsq64Y2hYyGqMgXCw-YnrfsSeCuQ49A%40mail.gmail.com\](https://groups.google.com/d/msgid/search-guard/CAAn%2BYTP8s3emsXvjHTPqsq64Y2hYyGqMgXCw-YnrfsSeCuQ49A%40mail.gmail.com%5C).  
> > For more options, visit [https://groups.google.com/d/optout\](https://groups.google.com/d/optout%5C).

---

<div class="post-metadata">

**Author:** ![Eliran\_Boraks](https://avatars.discourse-cdn.com/v4/letter/e/f14d63/32.png) [@Eliran\_Boraks](https://forum.search-guard.com/u/Eliran_Boraks)\
**Post date:** [February 20, 2017, 3:17pm UTC](https://forum.search-guard.com/t/tools-sgadmin-sh-error-no-valid-cipher-suites-for-transport-protocol/394/5 "2017-02-20T15:17:16Z")

</div>

I fixed it by adding the following:

$JAVA\_HOME/bin/java

Thanks

> **···**
>
> On Mon, Feb 20, 2017 at 8:52 AM, SG [info@search-guard.com](mailto:info@search-guard.com) wrote:
> 
> > you can look into sgadmin.sh to see how it works
> > 
> > > Am 20.02.2017 um 14:49 schrieb Eliran Boraks [eboraks@gmail.com](mailto:eboraks@gmail.com):
> > 
> > > 
> > 
> > > That is interesting because I did download Oracle’s Java and I set it to JAVA\_HOME. I can’t change the underline Java since, I don’t have root.
> > 
> > > 
> > 
> > > That mean that ‘sgadmin.sh’ isn’t using the JAVA\_HOME?
> > 
> > > 
> > 
> > > Eliran
> > 
> > > 
> > 
> > > On Sun, Feb 19, 2017 at 11:56 AM, Search Guard [info@search-guard.com](mailto:info@search-guard.com) wrote:
> > 
> > > IBM J9 VM is not supported, pls. use OpenJDK or OracleJVM.
> > 
> > > If you would like to run it anyway try Search Guard v11 with Search Guard SSL v20, this might be working but no guarantee
> > 
> > > 
> > 
> > > On Friday, 17 February 2017 21:10:55 UTC+1, Eliran Boraks wrote:
> > 
> > > I am trying to set-up the sgadmin, following this article [https://github.com/floragunncom/search-guard-docs/blob/master/sgadmin.md](https://github.com/floragunncom/search-guard-docs/blob/master/sgadmin.md)
> > 
> > > 
> > 
> > > 
> > 
> > > When running the sgadmin tool I am getting the following. I do have the Java Cryptography Extension installed.
> > 
> > > 
> > 
> > > $ ./sgadmin.sh -ts truststore.jks -tspass changeit -ks kirk-keystore.jks -kspass changeit -cd …/sgconfig -icl -nhnv
> > 
> > > Will connect to localhost:9300 … done
> > 
> > > ERR: An unexpected ElasticsearchSecurityException occured: no valid cipher suites for transport protocol
> > 
> > > Trace:
> > 
> > > ElasticsearchSecurityException[no valid cipher suites for transport protocol]
> > 
> > > ```
> > > at com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore.<init>(DefaultSearchGuardKeyStore.java:155)
> > > 
> > > ```
> > 
> > > ```
> > > at com.floragunn.searchguard.ssl.SearchGuardSSLModule.<init>(SearchGuardSSLModule.java:40)
> > > 
> > > ```
> > 
> > > ```
> > > at com.floragunn.searchguard.ssl.SearchGuardSSLPlugin.nodeModules(SearchGuardSSLPlugin.java:128)
> > > 
> > > ```
> > 
> > > ```
> > > at org.elasticsearch.plugins.PluginsService.nodeModules(PluginsService.java:263)
> > > 
> > > ```
> > 
> > > ```
> > > at org.elasticsearch.client.transport.TransportClient$Builder.build(TransportClient.java:141)
> > > 
> > > ```
> > 
> > > ```
> > > at com.floragunn.searchguard.tools.SearchGuardAdmin.main0(SearchGuardAdmin.java:315)
> > > 
> > > ```
> > 
> > > ```
> > > at com.floragunn.searchguard.tools.SearchGuardAdmin.main(SearchGuardAdmin.java:101)
> > > 
> > > ```
> > 
> > > 
> > 
> > > 
> > 
> > > Here is system setup:
> > 
> > > ls -l /elasticsearch-2.4.3/plugins/search-guard-2/tools
> > 
> > > -rw-rw-r–. 1 214 Feb 3 12:50 hash.bat
> > 
> > > -rw-rw-r–. 1 197 Feb 3 12:50 hash.sh
> > 
> > > -rw-rw-r–. 1 4423 Feb 17 12:56 kirk-keystore.jks
> > 
> > > -rw-rw-r–. 1 222 Feb 3 12:50 sgadmin.bat
> > 
> > > -rwxrwxrwx. 1 218 Feb 3 12:50 sgadmin.sh
> > 
> > > -rw-rw-r–. 1 1096 Feb 17 12:56 truststore.jks
> > 
> > > 
> > 
> > > $ java -version
> > 
> > > java version “1.8.0”
> > 
> > > Java™ SE Runtime Environment (build pxa6480sr4-20170127\_01(SR4))
> > 
> > > IBM J9 VM (build 2.8, JRE 1.8.0 Linux amd64-64 Compressed References 20170117\_333500 (JIT enabled, AOT enabled)
> > 
> > > J9VM - R28\_20170117\_0200\_B333500
> > 
> > > JIT - tr.r14.java.green\_20170115\_130932
> > 
> > > GC - R28\_20170117\_0200\_B333500\_CMPRSS
> > 
> > > J9CL - 20170117\_333500)
> > 
> > > JCL - 20170125\_01 based on Oracle jdk8u121-b13
> > 
> > > 
> > 
> > > elasticsearch.yml:
> > 
> > > searchguard.ssl.transport.keystore\_filepath: node-0-keystore.jks
> > 
> > > searchguard.ssl.transport.keystore\_password: changeit
> > 
> > > searchguard.ssl.transport.truststore\_filepath: truststore.jks
> > 
> > > searchguard.ssl.transport.truststore\_password: changeit
> > 
> > > searchguard.ssl.transport.enforce\_hostname\_verification: false
> > 
> > > 
> > 
> > > searchguard.authcz.admin\_dn: CN=kirk,OU=client,O=client,L=test, C=DE
> > 
> > > “elasticsearch.yml” 135L, 4552C
> > 
> > > 
> > 
> > > Output of ES:
> > 
> > > [2017-02-17 19:56:02,420][INFO][node] [Nekra] version[2.4.3], pid[1430], build[d38a34e/2016-12-07T16:28:56Z]
> > 
> > > [2017-02-17 19:56:02,421][INFO][node] [Nekra] initializing …
> > 
> > > [2017-02-17 19:56:03,226][INFO][com.floragunn.searchguard.ssl.SearchGuardSSLPlugin] Search Guard 2 plugin also available
> > 
> > > [2017-02-17 19:56:03,245][INFO][com.floragunn.searchguard.SearchGuardPlugin] Clustername: elasticsearch
> > 
> > > [2017-02-17 19:56:03,245][INFO][com.floragunn.searchguard.SearchGuardPlugin] Node [null] is a transportClient: false/tribeNode: false/tribeNodeClient: false
> > 
> > > [2017-02-17 19:56:03,246][INFO][plugins] [Nekra] modules [reindex, lang-expression, lang-groovy], plugins [search-guard-ssl, search-guard-2], sites
> > 
> > > [2017-02-17 19:56:03,278][INFO][env] [Nekra] using [1] data paths, mounts [[/ (rootfs)]], net usable\_space [5.6gb], net total\_space [9.9gb], spins? [unknown], types [rootfs]
> > 
> > > [2017-02-17 19:56:03,278][INFO][env] [Nekra] heap size [1.9gb], compressed ordinary object pointers [true]
> > 
> > > [2017-02-17 19:56:03,278][WARN][env] [Nekra] max file descriptors [4096] for elasticsearch process likely too low, consider increasing to at least [65536]
> > 
> > > [2017-02-17 19:56:03,335][INFO][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] Open SSL not available (this is not an error, we simply fallback to built-in JDK SSL) because of java.lang.ClassNotFoundException: org.apache.tomcat.jni.SSL
> > 
> > > [2017-02-17 19:56:03,780][INFO][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] Config directory is /opt/elastic/ElasticSearch/elasticsearch-2.4.3/config/, from there the key- and truststore files are resolved relatively
> > 
> > > [2017-02-17 19:56:03,826][INFO][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] sslTransportClientProvider:JDK with ciphers [TLS\_ECDHE\_ECDSA\_WITH\_AES\_256\_CBC\_SHA384, TLS\_ECDHE\_RSA\_WITH\_AES\_256\_CBC\_SHA384, TLS\_DHE\_RSA\_WITH\_AES\_256\_CBC\_SHA256, TLS\_ECDHE\_ECDSA\_WITH\_AES\_256\_CBC\_SHA, TLS\_ECDHE\_RSA\_WITH\_AES\_256\_CBC\_SHA, TLS\_DHE\_RSA\_WITH\_AES\_256\_CBC\_SHA, TLS\_DHE\_DSS\_WITH\_AES\_256\_CBC\_SHA, TLS\_ECDHE\_ECDSA\_WITH\_AES\_128\_CBC\_SHA256, TLS\_ECDHE\_RSA\_WITH\_AES\_128\_CBC\_SHA256, TLS\_DHE\_RSA\_WITH\_AES\_128\_CBC\_SHA256, TLS\_DHE\_DSS\_WITH\_AES\_128\_CBC\_SHA256, TLS\_ECDHE\_ECDSA\_WITH\_AES\_128\_CBC\_SHA, TLS\_ECDHE\_RSA\_WITH\_AES\_128\_CBC\_SHA, TLS\_DHE\_RSA\_WITH\_AES\_128\_CBC\_SHA, TLS\_ECDHE\_ECDSA\_WITH\_AES\_256\_GCM\_SHA384, TLS\_ECDHE\_ECDSA\_WITH\_AES\_128\_GCM\_SHA256, TLS\_ECDHE\_RSA\_WITH\_AES\_256\_GCM\_SHA384, TLS\_DHE\_RSA\_WITH\_AES\_256\_GCM\_SHA384, TLS\_DHE\_DSS\_WITH\_AES\_256\_GCM\_SHA384, TLS\_ECDHE\_RSA\_WITH\_AES\_128\_GCM\_SHA256, TLS\_DHE\_RSA\_WITH\_AES\_128\_GCM\_SHA256, TLS\_DHE\_DSS\_WITH\_AES\_128\_GCM\_SHA256]
> > 
> > > [2017-02-17 19:56:03,826][INFO][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] sslTransportServerProvider:JDK with ciphers [TLS\_ECDHE\_ECDSA\_WITH\_AES\_256\_CBC\_SHA384, TLS\_ECDHE\_RSA\_WITH\_AES\_256\_CBC\_SHA384, TLS\_DHE\_RSA\_WITH\_AES\_256\_CBC\_SHA256, TLS\_ECDHE\_ECDSA\_WITH\_AES\_256\_CBC\_SHA, TLS\_ECDHE\_RSA\_WITH\_AES\_256\_CBC\_SHA, TLS\_DHE\_RSA\_WITH\_AES\_256\_CBC\_SHA, TLS\_DHE\_DSS\_WITH\_AES\_256\_CBC\_SHA, TLS\_ECDHE\_ECDSA\_WITH\_AES\_128\_CBC\_SHA256, TLS\_ECDHE\_RSA\_WITH\_AES\_128\_CBC\_SHA256, TLS\_DHE\_RSA\_WITH\_AES\_128\_CBC\_SHA256, TLS\_DHE\_DSS\_WITH\_AES\_128\_CBC\_SHA256, TLS\_ECDHE\_ECDSA\_WITH\_AES\_128\_CBC\_SHA, TLS\_ECDHE\_RSA\_WITH\_AES\_128\_CBC\_SHA, TLS\_DHE\_RSA\_WITH\_AES\_128\_CBC\_SHA, TLS\_ECDHE\_ECDSA\_WITH\_AES\_256\_GCM\_SHA384, TLS\_ECDHE\_ECDSA\_WITH\_AES\_128\_GCM\_SHA256, TLS\_ECDHE\_RSA\_WITH\_AES\_256\_GCM\_SHA384, TLS\_DHE\_RSA\_WITH\_AES\_256\_GCM\_SHA384, TLS\_DHE\_DSS\_WITH\_AES\_256\_GCM\_SHA384, TLS\_ECDHE\_RSA\_WITH\_AES\_128\_GCM\_SHA256, TLS\_DHE\_RSA\_WITH\_AES\_128\_GCM\_SHA256, TLS\_DHE\_DSS\_WITH\_AES\_128\_GCM\_SHA256]
> > 
> > > [2017-02-17 19:56:03,826][INFO][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] sslHTTPProvider:null with ciphers
> > 
> > > [2017-02-17 19:56:03,826][INFO][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] sslTransport protocols [TLSv1.2, TLSv1.1]
> > 
> > > [2017-02-17 19:56:03,826][INFO][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] sslHTTP protocols [TLSv1.2, TLSv1.1]
> > 
> > > [2017-02-17 19:56:04,137][INFO][com.floragunn.searchguard.configuration.ConfigurationModule] FLS/DLS valve not bound (noop)
> > 
> > > [2017-02-17 19:56:04,139][INFO][com.floragunn.searchguard.auditlog.AuditLogModule] Auditlog not available
> > 
> > > [2017-02-17 19:56:04,304][INFO][transport] [Nekra] Using [com.floragunn.searchguard.transport.SearchGuardTransportService] as transport service, overridden by [search-guard2]
> > 
> > > [2017-02-17 19:56:04,304][INFO][transport] [Nekra] Using [com.floragunn.searchguard.ssl.transport.SearchGuardSSLNettyTransport] as transport, overridden by [search-guard-ssl]
> > 
> > > [2017-02-17 19:56:07,110][INFO][node] [Nekra] initialized
> > 
> > > [2017-02-17 19:56:07,110][INFO][node] [Nekra] starting …
> > 
> > > [2017-02-17 19:56:07,292][INFO][com.floragunn.searchguard.transport.SearchGuardTransportService] [Nekra] publish\_address {[10.240.0.24:9300](http://10.240.0.24:9300)}, bound\_addresses {[::]:9300}
> > 
> > > [2017-02-17 19:56:07,296][INFO][com.floragunn.searchguard.action.configupdate.TransportConfigUpdateAction] [Nekra] Check if searchguard index exists …
> > 
> > > [2017-02-17 19:56:07,302][DEBUG][action.admin.indices.exists.indices] [Nekra] no known master node, scheduling a retry
> > 
> > > [2017-02-17 19:56:07,308][INFO][discovery] [Nekra] elasticsearch/pRteXY99TWyxyGZtUAkBJQ
> > 
> > > [2017-02-17 19:56:10,444][INFO][cluster.service] [Nekra] new\_master {Nekra}{pRteXY99TWyxyGZtUAkBJQ}{10.240.0.24}{[10.240.0.24:9300](http://10.240.0.24:9300)}, reason: zen-disco-join(elected\_as\_master, [0] joins received)
> > 
> > > [2017-02-17 19:56:10,508][INFO][http] [Nekra] publish\_address {[10.240.0.24:9200](http://10.240.0.24:9200)}, bound\_addresses {[::]:9200}
> > 
> > > [2017-02-17 19:56:10,508][INFO][node] [Nekra] started
> > 
> > > [2017-02-17 19:56:10,527][INFO][gateway] [Nekra] recovered [0] indices into cluster\_state
> > 
> > > [2017-02-17 19:56:10,528][INFO][com.floragunn.searchguard.action.configupdate.TransportConfigUpdateAction] [Nekra] searchguard index does not exist yet, so no need to load config on node startup. Use sgadmin to initialize cluster
> > 
> > > 
> > 
> > > 
> > 
> > > 
> > 
> > > 
> > 
> > > 
> > 
> > > 
> > 
> > > 
> > 
> > > 
> > 
> > > 
> > 
> > > –
> > 
> > > You received this message because you are subscribed to a topic in the Google Groups “Search Guard” group.
> > 
> > > To unsubscribe from this topic, visit [https://groups.google.com/d/topic/search-guard/4NzDbF2X6Mo/unsubscribe](https://groups.google.com/d/topic/search-guard/4NzDbF2X6Mo/unsubscribe).
> > 
> > > To unsubscribe from this group and all its topics, send an email to [search-guard+unsubscribe@googlegroups.com](mailto:search-guard+unsubscribe@googlegroups.com).
> > 
> > > To post to this group, send email to [search-guard@googlegroups.com](mailto:search-guard@googlegroups.com).
> > 
> > > To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/ae3029fc-9b0b-4e14-89ba-8ef80cec8172%40googlegroups.com](https://groups.google.com/d/msgid/search-guard/ae3029fc-9b0b-4e14-89ba-8ef80cec8172%40googlegroups.com).
> > 
> > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).
> > 
> > > 
> > 
> > > 
> > 
> > > 
> > 
> > > –
> > 
> > > Keep in touch
> > 
> > > Twitter
> > 
> > > LinkedIn
> > 
> > > Facebook
> > 
> > > 
> > 
> > > –
> 
> > > You received this message because you are subscribed to the Google Groups “Search Guard” group.
> > 
> > > To unsubscribe from this group and stop receiving emails from it, send an email to [search-guard+unsubscribe@googlegroups.com](mailto:search-guard+unsubscribe@googlegroups.com).
> > 
> > > To post to this group, send email to [search-guard@googlegroups.com](mailto:search-guard@googlegroups.com).
> > 
> > > To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/CAAn%2BYTP8s3emsXvjHTPqsq64Y2hYyGqMgXCw-YnrfsSeCuQ49A%40mail.gmail.com](https://groups.google.com/d/msgid/search-guard/CAAn%2BYTP8s3emsXvjHTPqsq64Y2hYyGqMgXCw-YnrfsSeCuQ49A%40mail.gmail.com).
> > 
> > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).
> > 
> > –
> > 
> > You received this message because you are subscribed to a topic in the Google Groups “Search Guard” group.
> > 
> > To unsubscribe from this topic, visit [https://groups.google.com/d/topic/search-guard/4NzDbF2X6Mo/unsubscribe](https://groups.google.com/d/topic/search-guard/4NzDbF2X6Mo/unsubscribe).
> > 
> > To unsubscribe from this group and all its topics, send an email to [search-guard+unsubscribe@googlegroups.com](mailto:search-guard+unsubscribe@googlegroups.com).
> > 
> > To post to this group, send email to [search-guard@googlegroups.com](mailto:search-guard@googlegroups.com).
> > 
> > To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/A3549202-2F34-4616-8C5D-9F259270838F%40search-guard.com](https://groups.google.com/d/msgid/search-guard/A3549202-2F34-4616-8C5D-9F259270838F%40search-guard.com).  
> > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).
> 
> –
> 
> Keep in touch
> 
> [Twitter](http://twitter.com/#!/eboraks)  
> [LinkedIn](http://www.linkedin.com/pub/eliran-boraks/1/940/657)
> 
> [Facebook](http://www.facebook.com/eliran.boraks)

---

<div class="post-metadata">

**Author:** ![searchguard\_google\_group](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/searchguard_google_group/32/462_2.png) [@searchguard\_google\_group](https://forum.search-guard.com/u/searchguard_google_group)\
**Post date:** [February 20, 2017, 4:01pm UTC](https://forum.search-guard.com/t/tools-sgadmin-sh-error-no-valid-cipher-suites-for-transport-protocol/394/6 "2017-02-20T16:01:25Z")

</div>

thx, also fixed in master: [https://github.com/floragunncom/search-guard/commit/a776ab93d6a18afcf0c5c73afddb51177c2f2125](https://github.com/floragunncom/search-guard/commit/a776ab93d6a18afcf0c5c73afddb51177c2f2125)

> **···**
>
> > Am 20.02.2017 um 16:17 schrieb Eliran Boraks \<eboraks@gmail.com\>:
> > 
> > I fixed it by adding the following:
> > 
> > $JAVA\_HOME/bin/java
> > 
> > Thanks
> > 
> > On Mon, Feb 20, 2017 at 8:52 AM, SG \<info@search-guard.com\> wrote:  
> > you can look into sgadmin.sh to see how it works
> > 
> > \> Am 20.02.2017 um 14:49 schrieb Eliran Boraks \<eboraks@gmail.com\>:  
> > \>  
> > \> That is interesting because I did download Oracle's Java and I set it to JAVA\_HOME. I can't change the underline Java since, I don't have root.  
> > \>  
> > \> That mean that 'sgadmin.sh' isn't using the JAVA\_HOME?  
> > \>  
> > \> Eliran  
> > \>  
> > \> On Sun, Feb 19, 2017 at 11:56 AM, Search Guard \<info@search-guard.com\> wrote:  
> > \> IBM J9 VM is not supported, pls. use OpenJDK or OracleJVM.  
> > \> If you would like to run it anyway try Search Guard v11 with Search Guard SSL v20, this might be working but no guarantee  
> > \>  
> > \> On Friday, 17 February 2017 21:10:55 UTC+1, Eliran Boraks wrote:  
> > \> I am trying to set-up the sgadmin, following this article [https://github.com/floragunncom/search-guard-docs/blob/master/sgadmin.md](https://github.com/floragunncom/search-guard-docs/blob/master/sgadmin.md)  
> > \>  
> > \>  
> > \> When running the sgadmin tool I am getting the following. I do have the Java Cryptography Extension installed.  
> > \>  
> > \> $ ./sgadmin.sh -ts truststore.jks -tspass changeit -ks kirk-keystore.jks -kspass changeit -cd ../sgconfig -icl -nhnv  
> > \> Will connect to localhost:9300 ... done  
> > \> ERR: An unexpected ElasticsearchSecurityException occured: no valid cipher suites for transport protocol  
> > \> Trace:  
> > \> ElasticsearchSecurityException[no valid cipher suites for transport protocol]  
> > \> at com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore.\<init\>(DefaultSearchGuardKeyStore.java:155)  
> > \> at com.floragunn.searchguard.ssl.SearchGuardSSLModule.\<init\>(SearchGuardSSLModule.java:40)  
> > \> at com.floragunn.searchguard.ssl.SearchGuardSSLPlugin.nodeModules(SearchGuardSSLPlugin.java:128)  
> > \> at org.elasticsearch.plugins.PluginsService.nodeModules(PluginsService.java:263)  
> > \> at org.elasticsearch.client.transport.TransportClient$Builder.build(TransportClient.java:141)  
> > \> at com.floragunn.searchguard.tools.SearchGuardAdmin.main0(SearchGuardAdmin.java:315)  
> > \> at com.floragunn.searchguard.tools.SearchGuardAdmin.main(SearchGuardAdmin.java:101)  
> > \>  
> > \>  
> > \> Here is system setup:  
> > \> ls -l /elasticsearch-2.4.3/plugins/search-guard-2/tools  
> > \> -rw-rw-r--. 1 214 Feb 3 12:50 hash.bat  
> > \> -rw-rw-r--. 1 197 Feb 3 12:50 hash.sh  
> > \> -rw-rw-r--. 1 4423 Feb 17 12:56 kirk-keystore.jks  
> > \> -rw-rw-r--. 1 222 Feb 3 12:50 sgadmin.bat  
> > \> -rwxrwxrwx. 1 218 Feb 3 12:50 sgadmin.sh  
> > \> -rw-rw-r--. 1 1096 Feb 17 12:56 truststore.jks  
> > \>  
> > \> $ java -version  
> > \> java version "1.8.0"  
> > \> Java(TM) SE Runtime Environment (build pxa6480sr4-20170127\_01(SR4))  
> > \> IBM J9 VM (build 2.8, JRE 1.8.0 Linux amd64-64 Compressed References 20170117\_333500 (JIT enabled, AOT enabled)  
> > \> J9VM - R28\_20170117\_0200\_B333500  
> > \> JIT - tr.r14.java.green\_20170115\_130932  
> > \> GC - R28\_20170117\_0200\_B333500\_CMPRSS  
> > \> J9CL - 20170117\_333500)  
> > \> JCL - 20170125\_01 based on Oracle jdk8u121-b13  
> > \>  
> > \> elasticsearch.yml:  
> > \> searchguard.ssl.transport.keystore\_filepath: node-0-keystore.jks  
> > \> searchguard.ssl.transport.keystore\_password: changeit  
> > \> searchguard.ssl.transport.truststore\_filepath: truststore.jks  
> > \> searchguard.ssl.transport.truststore\_password: changeit  
> > \> searchguard.ssl.transport.enforce\_hostname\_verification: false  
> > \>  
> > \> searchguard.authcz.admin\_dn: CN=kirk,OU=client,O=client,L=test, C=DE  
> > \> "elasticsearch.yml" 135L, 4552C  
> > \>  
> > \> Output of ES:  
> > \> [2017-02-17 19:56:02,420][INFO][node] [Nekra] version[2.4.3], pid[1430], build[d38a34e/2016-12-07T16:28:56Z]  
> > \> [2017-02-17 19:56:02,421][INFO][node] [Nekra] initializing ...  
> > \> [2017-02-17 19:56:03,226][INFO][com.floragunn.searchguard.ssl.SearchGuardSSLPlugin] Search Guard 2 plugin also available  
> > \> [2017-02-17 19:56:03,245][INFO][com.floragunn.searchguard.SearchGuardPlugin] Clustername: elasticsearch  
> > \> [2017-02-17 19:56:03,245][INFO][com.floragunn.searchguard.SearchGuardPlugin] Node [null] is a transportClient: false/tribeNode: false/tribeNodeClient: false  
> > \> [2017-02-17 19:56:03,246][INFO][plugins] [Nekra] modules [reindex, lang-expression, lang-groovy], plugins [search-guard-ssl, search-guard-2], sites   
> > \> [2017-02-17 19:56:03,278][INFO][env] [Nekra] using [1] data paths, mounts [[/ (rootfs)]], net usable\_space [5.6gb], net total\_space [9.9gb], spins? [unknown], types [rootfs]  
> > \> [2017-02-17 19:56:03,278][INFO][env] [Nekra] heap size [1.9gb], compressed ordinary object pointers [true]  
> > \> [2017-02-17 19:56:03,278][WARN][env] [Nekra] max file descriptors [4096] for elasticsearch process likely too low, consider increasing to at least [65536]  
> > \> [2017-02-17 19:56:03,335][INFO][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] Open SSL not available (this is not an error, we simply fallback to built-in JDK SSL) because of java.lang.ClassNotFoundException: org.apache.tomcat.jni.SSL  
> > \> [2017-02-17 19:56:03,780][INFO][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] Config directory is /opt/elastic/ElasticSearch/elasticsearch-2.4.3/config/, from there the key- and truststore files are resolved relatively  
> > \> [2017-02-17 19:56:03,826][INFO][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] sslTransportClientProvider:JDK with ciphers [TLS\_ECDHE\_ECDSA\_WITH\_AES\_256\_CBC\_SHA384, TLS\_ECDHE\_RSA\_WITH\_AES\_256\_CBC\_SHA384, TLS\_DHE\_RSA\_WITH\_AES\_256\_CBC\_SHA256, TLS\_ECDHE\_ECDSA\_WITH\_AES\_256\_CBC\_SHA, TLS\_ECDHE\_RSA\_WITH\_AES\_256\_CBC\_SHA, TLS\_DHE\_RSA\_WITH\_AES\_256\_CBC\_SHA, TLS\_DHE\_DSS\_WITH\_AES\_256\_CBC\_SHA, TLS\_ECDHE\_ECDSA\_WITH\_AES\_128\_CBC\_SHA256, TLS\_ECDHE\_RSA\_WITH\_AES\_128\_CBC\_SHA256, TLS\_DHE\_RSA\_WITH\_AES\_128\_CBC\_SHA256, TLS\_DHE\_DSS\_WITH\_AES\_128\_CBC\_SHA256, TLS\_ECDHE\_ECDSA\_WITH\_AES\_128\_CBC\_SHA, TLS\_ECDHE\_RSA\_WITH\_AES\_128\_CBC\_SHA, TLS\_DHE\_RSA\_WITH\_AES\_128\_CBC\_SHA, TLS\_ECDHE\_ECDSA\_WITH\_AES\_256\_GCM\_SHA384, TLS\_ECDHE\_ECDSA\_WITH\_AES\_128\_GCM\_SHA256, TLS\_ECDHE\_RSA\_WITH\_AES\_256\_GCM\_SHA384, TLS\_DHE\_RSA\_WITH\_AES\_256\_GCM\_SHA384, TLS\_DHE\_DSS\_WITH\_AES\_256\_GCM\_SHA384, TLS\_ECDHE\_RSA\_WITH\_AES\_128\_GCM\_SHA256, TLS\_DHE\_RSA\_WITH\_AES\_128\_GCM\_SHA256, TLS\_DHE\_DSS\_WITH\_AES\_128\_GCM\_SHA256]  
> > \> [2017-02-17 19:56:03,826][INFO][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] sslTransportServerProvider:JDK with ciphers [TLS\_ECDHE\_ECDSA\_WITH\_AES\_256\_CBC\_SHA384, TLS\_ECDHE\_RSA\_WITH\_AES\_256\_CBC\_SHA384, TLS\_DHE\_RSA\_WITH\_AES\_256\_CBC\_SHA256, TLS\_ECDHE\_ECDSA\_WITH\_AES\_256\_CBC\_SHA, TLS\_ECDHE\_RSA\_WITH\_AES\_256\_CBC\_SHA, TLS\_DHE\_RSA\_WITH\_AES\_256\_CBC\_SHA, TLS\_DHE\_DSS\_WITH\_AES\_256\_CBC\_SHA, TLS\_ECDHE\_ECDSA\_WITH\_AES\_128\_CBC\_SHA256, TLS\_ECDHE\_RSA\_WITH\_AES\_128\_CBC\_SHA256, TLS\_DHE\_RSA\_WITH\_AES\_128\_CBC\_SHA256, TLS\_DHE\_DSS\_WITH\_AES\_128\_CBC\_SHA256, TLS\_ECDHE\_ECDSA\_WITH\_AES\_128\_CBC\_SHA, TLS\_ECDHE\_RSA\_WITH\_AES\_128\_CBC\_SHA, TLS\_DHE\_RSA\_WITH\_AES\_128\_CBC\_SHA, TLS\_ECDHE\_ECDSA\_WITH\_AES\_256\_GCM\_SHA384, TLS\_ECDHE\_ECDSA\_WITH\_AES\_128\_GCM\_SHA256, TLS\_ECDHE\_RSA\_WITH\_AES\_256\_GCM\_SHA384, TLS\_DHE\_RSA\_WITH\_AES\_256\_GCM\_SHA384, TLS\_DHE\_DSS\_WITH\_AES\_256\_GCM\_SHA384, TLS\_ECDHE\_RSA\_WITH\_AES\_128\_GCM\_SHA256, TLS\_DHE\_RSA\_WITH\_AES\_128\_GCM\_SHA256, TLS\_DHE\_DSS\_WITH\_AES\_128\_GCM\_SHA256]  
> > \> [2017-02-17 19:56:03,826][INFO][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] sslHTTPProvider:null with ciphers   
> > \> [2017-02-17 19:56:03,826][INFO][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] sslTransport protocols [TLSv1.2, TLSv1.1]  
> > \> [2017-02-17 19:56:03,826][INFO][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] sslHTTP protocols [TLSv1.2, TLSv1.1]  
> > \> [2017-02-17 19:56:04,137][INFO][com.floragunn.searchguard.configuration.ConfigurationModule] FLS/DLS valve not bound (noop)  
> > \> [2017-02-17 19:56:04,139][INFO][com.floragunn.searchguard.auditlog.AuditLogModule] Auditlog not available  
> > \> [2017-02-17 19:56:04,304][INFO][transport] [Nekra] Using [com.floragunn.searchguard.transport.SearchGuardTransportService] as transport service, overridden by [search-guard2]  
> > \> [2017-02-17 19:56:04,304][INFO][transport] [Nekra] Using [com.floragunn.searchguard.ssl.transport.SearchGuardSSLNettyTransport] as transport, overridden by [search-guard-ssl]  
> > \> [2017-02-17 19:56:07,110][INFO][node] [Nekra] initialized  
> > \> [2017-02-17 19:56:07,110][INFO][node] [Nekra] starting ...  
> > \> [2017-02-17 19:56:07,292][INFO][com.floragunn.searchguard.transport.SearchGuardTransportService] [Nekra] publish\_address {10.240.0.24:9300}, bound\_addresses {[::]:9300}  
> > \> [2017-02-17 19:56:07,296][INFO][com.floragunn.searchguard.action.configupdate.TransportConfigUpdateAction] [Nekra] Check if searchguard index exists ...  
> > \> [2017-02-17 19:56:07,302][DEBUG][action.admin.indices.exists.indices] [Nekra] no known master node, scheduling a retry  
> > \> [2017-02-17 19:56:07,308][INFO][discovery] [Nekra] elasticsearch/pRteXY99TWyxyGZtUAkBJQ  
> > \> [2017-02-17 19:56:10,444][INFO][cluster.service] [Nekra] new\_master {Nekra}{pRteXY99TWyxyGZtUAkBJQ}{10.240.0.24}{10.240.0.24:9300}, reason: zen-disco-join(elected\_as\_master, [0] joins received)  
> > \> [2017-02-17 19:56:10,508][INFO][http] [Nekra] publish\_address {10.240.0.24:9200}, bound\_addresses {[::]:9200}  
> > \> [2017-02-17 19:56:10,508][INFO][node] [Nekra] started  
> > \> [2017-02-17 19:56:10,527][INFO][gateway] [Nekra] recovered [0] indices into cluster\_state  
> > \> [2017-02-17 19:56:10,528][INFO][com.floragunn.searchguard.action.configupdate.TransportConfigUpdateAction] [Nekra] searchguard index does not exist yet, so no need to load config on node startup. Use sgadmin to initialize cluster  
> > \>  
> > \>  
> > \>  
> > \>  
> > \>  
> > \>  
> > \>  
> > \>  
> > \>  
> > \> --  
> > \> You received this message because you are subscribed to a topic in the Google Groups "Search Guard" group.  
> > \> To unsubscribe from this topic, visit [https://groups.google.com/d/topic/search-guard/4NzDbF2X6Mo/unsubscribe\](https://groups.google.com/d/topic/search-guard/4NzDbF2X6Mo/unsubscribe%5C).  
> > \> To unsubscribe from this group and all its topics, send an email to search-guard+unsubscribe@googlegroups.com.  
> > \> To post to this group, send email to search-guard@googlegroups.com.  
> > \> To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/ae3029fc-9b0b-4e14-89ba-8ef80cec8172%40googlegroups.com\](https://groups.google.com/d/msgid/search-guard/ae3029fc-9b0b-4e14-89ba-8ef80cec8172%40googlegroups.com%5C).  
> > \> For more options, visit [https://groups.google.com/d/optout\](https://groups.google.com/d/optout%5C).  
> > \>  
> > \>  
> > \>  
> > \> --  
> > \> Keep in touch  
> > \> Twitter  
> > \> LinkedIn  
> > \> Facebook  
> > \>  
> > \> --  
> > \> You received this message because you are subscribed to the Google Groups "Search Guard" group.  
> > \> To unsubscribe from this group and stop receiving emails from it, send an email to search-guard+unsubscribe@googlegroups.com.  
> > \> To post to this group, send email to search-guard@googlegroups.com.  
> > \> To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/CAAn%2BYTP8s3emsXvjHTPqsq64Y2hYyGqMgXCw-YnrfsSeCuQ49A%40mail.gmail.com\](https://groups.google.com/d/msgid/search-guard/CAAn%2BYTP8s3emsXvjHTPqsq64Y2hYyGqMgXCw-YnrfsSeCuQ49A%40mail.gmail.com%5C).  
> > \> For more options, visit [https://groups.google.com/d/optout\](https://groups.google.com/d/optout%5C).
> > 
> > --  
> > You received this message because you are subscribed to a topic in the Google Groups "Search Guard" group.  
> > To unsubscribe from this topic, visit [https://groups.google.com/d/topic/search-guard/4NzDbF2X6Mo/unsubscribe\](https://groups.google.com/d/topic/search-guard/4NzDbF2X6Mo/unsubscribe%5C).  
> > To unsubscribe from this group and all its topics, send an email to search-guard+unsubscribe@googlegroups.com.  
> > To post to this group, send email to search-guard@googlegroups.com.  
> > To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/A3549202-2F34-4616-8C5D-9F259270838F%40search-guard.com\](https://groups.google.com/d/msgid/search-guard/A3549202-2F34-4616-8C5D-9F259270838F%40search-guard.com%5C).  
> > For more options, visit [https://groups.google.com/d/optout\](https://groups.google.com/d/optout%5C).
> > 
> > --  
> > Keep in touch  
> > Twitter  
> > LinkedIn  
> > Facebook
> > 
> > --  
> > You received this message because you are subscribed to the Google Groups "Search Guard" group.  
> > To unsubscribe from this group and stop receiving emails from it, send an email to search-guard+unsubscribe@googlegroups.com.  
> > To post to this group, send email to search-guard@googlegroups.com.  
> > To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/CAAn%2BYTMrPsQ%2BOHQqxcZnwg%3DcOLOSd7GWGvj%2B3kPKCpKM%3DJW6ug%40mail.gmail.com\](https://groups.google.com/d/msgid/search-guard/CAAn%2BYTMrPsQ%2BOHQqxcZnwg%3DcOLOSd7GWGvj%2B3kPKCpKM%3DJW6ug%40mail.gmail.com%5C).  
> > For more options, visit [https://groups.google.com/d/optout\](https://groups.google.com/d/optout%5C).