Elasticsearch version: 7.10.2 Server OS version: windows 10 home 64bit Kibana version (if relevant): 7.10.2 Browser version (if relevant): Windows Chrome Version 88.0.4324.190 Browser OS version (if relevant): Windows Chrome Version 88.0.4324.190 Describe the issue: facing certificate_unk…

The certificate_unknown error means that the certificate can’t be verified by the system. Let’s try to hit the Elasticsearch with curl first curl -v -k -u admin:admin https://localhost:9200 Does it work? Show me the Elasticsearch log if any.

Rebuilt URL to: https://localhost:9200/ Trying ::1… TCP_NODELAY set Connected to localhost (::1) port 9200 (#0) schannel: SSL/TLS connection with localhost port 9200 (step 1/3) schannel: disabled server certificate revocation checks schannel: verifyhost setting prevents Schannel from comparing the…

REQUEST curl -v -XGET \ –cacert /path/to/elasticsearch-7.10.2/config/root-ca.pem \ –cert /path/to/elasticsearch-7.10.2/config/kirk.pem \ –key /path/to/elasticsearch-7.10.2/config/kirk-key.pem \ https://localhost:9200 RESPONSE C:\WINDOWS\system32>curl -v -XGET --cacert F:\ELK\elasticsearch-7.10.2/…

I see the command curl -v -k -u admin:admin https://localhost:9200 worked for you. Then, I think, hitting https://localhost:9200 with a web browser from the same machine where you executed curl should work too. You should see the basic-auth dialog, put the credentials. The curl request with certifi…

While hitting https://localhost:9200 … i got basic auth dialog, got response to browser { “name” : “HARI”, “cluster_name” : “searchguard_demo”, “cluster_uuid” : “VKTWfCEXR-WFVIXgSKtVxQ”, “version” : { “number” : “7.10.2”, “build_flavor” : “default”, “build_type” : “zip”, “build_hash” : “747e…

Using default certificates only which are generated while executed install_demo_configuration.sh. We did’n chang them in elasticsearch-7.10.2/config. Not using any proxies.

[image] sivakumarreddy2026: While hitting https://localhost:9200 … i got basic auth dialog, got response to browser { “name” : “HARI”, “cluster_name” : “searchguard_demo”, “cluster_uuid” : “VKTWfCEXR-WFVIXgSKtVxQ”, Ok, you were able to get the response. The Elasticsearch API access works a…

I can reproduce the error in the log. With Firefox, I get it only the first time after I accept the risk in the web browser. With Chrome, I get it for every web browser request. I think it is related to this Chrome bug 952778 - chromium - An open-source project to help move the web forward. - Monora…

We are trying to connect elasticsearch( https://localhost:9200 ) with kibana and heartbeat, we didn’t mention about certificates details in either kibana.yml or heartbeat.yml updates in kibana.yml elasticsearch.username: “kibanaserver” elasticsearch.password: “kibanaserver” elasticsearch.hosts: “ h…

The certificate_unknown error in the log is cosmetical. What doesn’t work exactly, Kibana? I see you miss some config options in your kibana.yml. A typical Kibana configuration for the basic authentication and no certificates is # Activate basic auth searchguard.auth.type: "basicauth" # Configure …

Unknown certificate

Search Guard

srgbnd March 10, 2021, 1:40pm 14

The periodical certificate_unknown error in the log might be caused by the heartbeat. Configure ssl.verification_mode: none for it. Or provide the root certificate in ssl.certificate_authorities.

Topic		Replies	Views
Elasticsearch/Kibana 7.6.2 - Receiving error: "javax.net.ssl.SSLHandshakeException: Received fatal alert: certificate_unknown" Search Guard	4	7332	May 14, 2020
SSL Problem Received fatal alert: certificate_unknown Search Guard	4	10718	December 21, 2018
Kibana Fails to connect to Elasticsearch after the install of SearchGuard Search Guard	7	4875	March 6, 2017
Certifiicates for Search Guard Causing an Issue Search Guard	13	3151	June 5, 2023
Tls-tool-1.8 - updating certs Search Guard	7	945	November 19, 2020

Unknown certificate

Related topics