Search Guard SSL installation setup

[Banu Priya]

After installing the "search guard SSL" and "search-guard-2" in elasticsearch 2.3.2 ,once installed i have tried starting elasticsearch after that i am receiving this error "Exception in thread "main" ElasticsearchException[searchguard.ssl.transport.keys
tore_filepath must be set if transport ssl is reqested.]" could somebody suggest on this 

[ZillaYT]

Did you add the line mention in the SG SSL Configuration page to your elasticsearch.yml file?

[ZillaYT]

I meant "lines" (multiple lines), not "line" (one line).

[郭旭]

Can I see your elasticsearch.yml  ? 

--
You received this message because you are subscribed to the Google Groups "Search Guard" group.
To unsubscribe from this group and stop receiving emails from it, send an email to search-guard+unsubscribe@googlegroups.com.
To post to this group, send email to search...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/search-guard/aebe168a-b7a2-4324-af1a-875e819525ba%40googlegroups.com.

For more options, visit https://groups.google.com/d/optout.

[ZillaYT]

These are the pertinent lines that all your SG nodes will need these lines in their elasticsearch.yml file. I generated my *.jks files using the example scripts from the SG-SSL site.

# Enable SSL via Search Guard SSL plugin
# Enable HTTPS
searchguard.ssl.http.enabled: true
searchguard.ssl.http.keystore_filepath: your-node-keystore.jks
searchguard.ssl.http.keystore_password: keystore_pw
searchguard.ssl.http.truststore_filepath: truststore.jks
searchguard.ssl.http.truststore_password: truststore_pw

# Enable SSL between ES nodes
searchguard.ssl.transport.keystore_filepath: your-node-keystore.jks
searchguard.ssl.transport.keystore_password: keystore_pw
searchguard.ssl.transport.truststore_filepath: truststore.jks
searchguard.ssl.transport.truststore_password: truststore_pw
searchguard.ssl.transport.enforce_hostname_verification: false

# for Search Guard
searchguard.authcz.admin_dn:
  - "cn=kirk, ou=client, o=client, l=Your_Location, c=US"

On Wednesday, November 2, 2016 at 9:30:45 PM UTC-4, 郭旭 wrote:

Can I see your elasticsearch.yml  ? 

2016-11-02 23:05 GMT+08:00 ZillaYT <zil...@gmail.com>:

I meant "lines" (multiple lines), not "line" (one line).

On Wednesday, November 2, 2016 at 11:04:23 AM UTC-4, ZillaYT wrote:

Did you add the line mention in the SG SSL Configuration page to your elasticsearch.yml file?

On Monday, October 17, 2016 at 9:50:59 AM UTC-4, Banu Priya wrote:

After installing the "search guard SSL" and "search-guard-2" in elasticsearch 2.3.2 ,once installed i have tried starting elasticsearch after that i am receiving this error "Exception in thread "main" ElasticsearchException[searchguard.ssl.transport.keys
tore_filepath must be set if transport ssl is reqested.]" could somebody suggest on this 

--
You received this message because you are subscribed to the Google Groups "Search Guard" group.

To unsubscribe from this group and stop receiving emails from it, send an email to search-guard...@googlegroups.com.

To post to this group, send email to search...@googlegroups.com.