java.lang.IllegalArgumentException: script file extension not supported [jks]

[Eliran Boraks]

I have been following the ssl quickstart guide using the example-pki-scripts to generate keystores and truststores. 

When running elasticsearch, I am getting the following exceptions. I included the content of the config directory and the elasticsearch.yml below. Any ideas what I am doing wrong?

[2017-02-16 21:28:08,413][INFO ][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] sslHTTPProvider:null with ciphers []

[2017-02-16 21:28:08,413][INFO ][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] sslTransport protocols [TLSv1.2, TLSv1.1]

[2017-02-16 21:28:08,413][INFO ][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] sslHTTP protocols [TLSv1.2, TLSv1.1]

[2017-02-16 21:28:08,820][INFO ][com.floragunn.searchguard.configuration.ConfigurationModule] FLS/DLS valve not bound (noop)

[2017-02-16 21:28:08,822][INFO ][com.floragunn.searchguard.auditlog.AuditLogModule] Auditlog not available

[2017-02-16 21:28:09,087][INFO ][transport                ] [Captain America] Using [com.floragunn.searchguard.transport.SearchGuardTransportService] as transport service, overridden by [search-guard2]

[2017-02-16 21:28:09,087][INFO ][transport                ] [Captain America] Using [com.floragunn.searchguard.ssl.transport.SearchGuardSSLNettyTransport] as transport, overridden by [search-guard-ssl]

[2017-02-16 21:28:11,975][WARN ][watcher                  ] cannot notify file changes listener

java.lang.IllegalArgumentException: script file extension not supported [jks]

at org.elasticsearch.script.ScriptService.getScriptEngineServiceForFileExt(ScriptService.java:220)

at org.elasticsearch.script.ScriptService.access$1300(ScriptService.java:82)

at org.elasticsearch.script.ScriptService$ScriptChangesListener.onFileInit(ScriptService.java:531)

at org.elasticsearch.watcher.FileWatcher$FileObserver.onFileCreated(FileWatcher.java:256)

at org.elasticsearch.watcher.FileWatcher$FileObserver.init(FileWatcher.java:166)

at org.elasticsearch.watcher.FileWatcher$FileObserver.createChild(FileWatcher.java:173)

at org.elasticsearch.watcher.FileWatcher$FileObserver.listChildren(FileWatcher.java:188)

        ......

Config directory content: 

-rw-rw-r--. 1 4481 Feb 16 21:19 elasticsearch.yml

-rw-rw-r--. 1 5321 Feb 16 20:00 kirk.crt.pem

-rw-rw-r--. 1 2571 Aug 23 16:46 logging.yml

-rw-rw-r--. 1 4493 Feb 16 19:52 node-0-keystore.jks

drwxrwxr-x. 2   80 Feb 16 19:27 scripts

-rw-rw-r--. 1  1096 Feb 16 19:28 truststore.jks

elasticsearch.yml content: 

searchguard.ssl.transport.keystore_filepath: node-0-keystore.jks

searchguard.ssl.transport.keystore_password: changeit

searchguard.ssl.transport.truststore_filepath: truststore.jks

searchguard.ssl.transport.truststore_password: changeit

searchguard.ssl.transport.enforce_hostname_verification: false

[Search Guard]

what is in your "scripts" folder?

[Eliran Boraks]

The 'scripts' folder had old cert that I replaced. I remove it and now it's working thank you. 

Eliran

--
You received this message because you are subscribed to a topic in the Google Groups "Search Guard" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/search-guard/GH3WZiLXz4Y/unsubscribe.
To unsubscribe from this group and all its topics, send an email to search-guard+unsubscribe@googlegroups.com.
To post to this group, send email to search...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/search-guard/36b7f22e-54f7-4b17-af4a-f34d6436b015%40googlegroups.com.

For more options, visit https://groups.google.com/d/optout.

--

Keep in touch

Twitter 

LinkedIn

Facebook