# TSLtool doesn't create nodes sertificate **URL:** \ **Category:** Search Guard\ **Created:** [April 24, 2018, 12:50pm UTC](https://forum.search-guard.com/t/tsltool-doesnt-create-nodes-sertificate/888 "2018-04-24T12:50:17Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![Sergey\_Murashov](https://avatars.discourse-cdn.com/v4/letter/s/dbc845/32.png) [@Sergey\_Murashov](https://forum.search-guard.com/u/Sergey_Murashov)\ **Post date:** [April 24, 2018, 12:50pm UTC](https://forum.search-guard.com/t/tsltool-doesnt-create-nodes-sertificate/888/1 "2018-04-24T12:50:17Z")
When asking questions, please provide the following information: - Search Guard and Elasticsearch version 6.2.2 - JVM version and operating system version build 1.8.0\_161-b12 - Search Guard configuration files I has root-ca.pem and .key in ./out folder. When I write ./sgtlstool.sh -c …/config/test.yml -crt: > Exception in thread “main” java.lang.NullPointerException > at com.floragunn.searchguard.tools.tlstool.tasks.LoadCa.(LoadCa.java:51) > at com.floragunn.searchguard.tools.tlstool.SearchGuardTlsTool.run(SearchGuardTlsTool.java:184) > at com.floragunn.searchguard.tools.tlstool.SearchGuardTlsTool.main(SearchGuardTlsTool.java:65) and node certs not created. test.yml: > **···** > > > ca: > > root: > > > > # dn: CN=Taxnet Root CA,OU=Taxnet Root CA,O=Taxnet Root CA > > > > # keysize: 2048 > > > > # validityDays: 3650 > > > > ``` > > pkPassword: GO0FNhUQGURr > > file: root-ca.pem > > > > ``` > > > > defaults: > > validityDays: 3650 > > pkPassword: auto > > generatedPasswordLength: 12 > > httpsEnabled: true > > reuseTransportCertificatesForHttp: true > > nodes: > > > > # - name: [logstash.taxnet.ru](http://logstash.taxnet.ru) > > > > # dn: [CN=logstash.taxnet.ru](http://CN=logstash.taxnet.ru) > > > > # dns: [logstash.taxnet.ru](http://logstash.taxnet.ru) > > > > # - name: elastic1 > > > > # dn: CN=elastic1 > > > > # dns: elastic1 > > > > # - name: elastic2 > > > > # dn: CN=elastic2 > > > > # dns: elastic2 > > > > # - name: elastic3 > > > > # dn: CN=elastic3 > > > > # dns: elastic3 > > > > # - name: elastic4 > > > > # dn: CN=elastic4 > > > > # dns: elastic4 > > > > - name: elastic-netflow > > dn: CN=elastic-netflow > > dns: elastic-netflow > > #clients: > > > > # - name: sgadmin > > > > # dn: CN=sgadmin > > > > # admin: true > > > > # - name: user > > > > # dn: CN=user > > > > # - name: logstash > > > > # dn: CN=logstash > > > > # admin: true ---
**Author:** ![jkressin](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/jkressin/32/9_2.png) [@jkressin](https://forum.search-guard.com/u/jkressin)\ **Post date:** [April 25, 2018, 5:53am UTC](https://forum.search-guard.com/t/tsltool-doesnt-create-nodes-sertificate/888/2 "2018-04-25T05:53:08Z")
That might be an issue with the 1.1 release of the tool. Can I ask you to try again with v1.2. (just released): [https://search.maven.org/remotecontent?filepath=com/floragunn/search-guard-tlstool/1.2/search-guard-tlstool-1.2.zip](https://search.maven.org/remotecontent?filepath=com/floragunn/search-guard-tlstool/1.2/search-guard-tlstool-1.2.zip) > **···** > > On Tuesday, April 24, 2018 at 5:50:17 AM UTC-7, Sergey Murashov wrote: > > > When asking questions, please provide the following information: > > > - Search Guard and Elasticsearch version 6.2.2 > > > - JVM version and operating system version build 1.8.0\_161-b12 > > > - Search Guard configuration files > > > > > > I has root-ca.pem and .key in ./out folder. > > > When I write ./sgtlstool.sh -c …/config/test.yml -crt: > > > > Exception in thread “main” java.lang.NullPointerException > > > at com.floragunn.searchguard.tools.tlstool.tasks.LoadCa.(LoadCa.java:51) > > > at com.floragunn.searchguard.tools.tlstool.SearchGuardTlsTool.run(SearchGuardTlsTool.java:184) > > > at com.floragunn.searchguard.tools.tlstool.SearchGuardTlsTool.main(SearchGuardTlsTool.java:65) > > > and node certs not created. > > > > > > test.yml: > > > > ca: > > > root: > > > > > > # dn: CN=Taxnet Root CA,OU=Taxnet Root CA,O=Taxnet Root CA > > > > > > # keysize: 2048 > > > > > > # validityDays: 3650 > > > > > > ``` > > > pkPassword: GO0FNhUQGURr > > > file: root-ca.pem > > > > > > ``` > > > > > > defaults: > > > validityDays: 3650 > > > pkPassword: auto > > > generatedPasswordLength: 12 > > > httpsEnabled: true > > > reuseTransportCertificatesForHttp: true > > > nodes: > > > > > > # - name: [logstash.taxnet.ru](http://logstash.taxnet.ru) > > > > > > # dn: CN=[logstash.taxnet.ru](http://logstash.taxnet.ru) > > > > > > # dns: [logstash.taxnet.ru](http://logstash.taxnet.ru) > > > > > > # - name: elastic1 > > > > > > # dn: CN=elastic1 > > > > > > # dns: elastic1 > > > > > > # - name: elastic2 > > > > > > # dn: CN=elastic2 > > > > > > # dns: elastic2 > > > > > > # - name: elastic3 > > > > > > # dn: CN=elastic3 > > > > > > # dns: elastic3 > > > > > > # - name: elastic4 > > > > > > # dn: CN=elastic4 > > > > > > # dns: elastic4 > > > > > > - name: elastic-netflow > > > dn: CN=elastic-netflow > > > dns: elastic-netflow > > > #clients: > > > > > > # - name: sgadmin > > > > > > # dn: CN=sgadmin > > > > > > # admin: true > > > > > > # - name: user > > > > > > # dn: CN=user > > > > > > # - name: logstash > > > > > > # dn: CN=logstash > > > > > > # admin: true ---
**Author:** ![Sergey\_Murashov](https://avatars.discourse-cdn.com/v4/letter/s/dbc845/32.png) [@Sergey\_Murashov](https://forum.search-guard.com/u/Sergey_Murashov)\ **Post date:** [April 25, 2018, 5:51pm UTC](https://forum.search-guard.com/t/tsltool-doesnt-create-nodes-sertificate/888/3 "2018-04-25T17:51:48Z")
Thank you. It's work!!) ---
**Author:** ![Dave\_Bour](https://avatars.discourse-cdn.com/v4/letter/d/b5a626/32.png) [@Dave\_Bour](https://forum.search-guard.com/u/Dave_Bour)\ **Post date:** [April 25, 2018, 9:16pm UTC](https://forum.search-guard.com/t/tsltool-doesnt-create-nodes-sertificate/888/4 "2018-04-25T21:16:08Z")
> Thank you. It’s work!!) > > – > > You received this message because you are subscribed to the Google Groups “Search Guard Community Forum” group. > > To unsubscribe from this group and stop receiving emails from it, send an email to [search-guard+unsubscribe@googlegroups.com](mailto:search-guard+unsubscribe@googlegroups.com). > > To post to this group, send email to [search-guard@googlegroups.com](mailto:search-guard@googlegroups.com). > > To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/a04e56e5-5d9a-473e-9f18-efc3ff2166e0%40googlegroups.com](https://groups.google.com/d/msgid/search-guard/a04e56e5-5d9a-473e-9f18-efc3ff2166e0%40googlegroups.com). > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). > **···** > > On Wed, Apr 25, 2018, 13:51 Sergey Murashov [sergey.murashow@gmail.com](mailto:sergey.murashow@gmail.com) wrote: