can't install plugin 5.0.0-alpha4-2a

[Brian Walsh]

# curl localhost:9200

{

  "name" : "central",

  "cluster_name" : "ccc-es",

  "version" : {

    "number" : "5.0.0-alpha4",

    "build_hash" : "3f5b994",

    "build_date" : "2016-06-27T16:23:46.861Z",

    "build_snapshot" : false,

    "lucene_version" : "6.1.0"

  },

  "tagline" : "You Know, for Search"

}

Several attempts:

# bin/elasticsearch-plugin  install -b  com.floragunn/search-guard-2/5.0.0-alpha4-2a

A tool for managing installed elasticsearch plugins

Commands

--------

list - Lists installed elasticsearch plugins

install - Install a plugin

remove - Removes a plugin from elasticsearch

Non-option arguments:

command

Option         Description

------         -----------

-h, --help     show help

-s, --silent   show minimal output

-v, --verbose  show verbose output

ERROR: Unknown plugin com.floragunn/search-guard-2/5.0.0-alpha4-2a

# bin/elasticsearch-plugin   install  https://maven-repository.com/artifact/com.floragunn/search-guard-2/5.0.0-alpha4-2a

-> Downloading https://maven-repository.com/artifact/com.floragunn/search-guard-2/5.0.0-alpha4-2a

ERROR: `elasticsearch` directory is missing in the plugin zip

# bin/elasticsearch-plugin  install https://oss.sonatype.org/content/repositories/releases/com/floragunn/search-guard-2/5.0.0-alpha4-2a

-> Downloading https://oss.sonatype.org/content/repositories/releases/com/floragunn/search-guard-2/5.0.0-alpha4-2a

ERROR: `elasticsearch` directory is missing in the plugin zip

[SG]

seems like plugin manager is totally broken in alpha4, so pls try this:

wget http://search.maven.org/remotecontent\?filepath\=com/floragunn/search-guard-2/5.0.0-alpha4-2a/search-guard-2-5.0.0-alpha4-2a.zip --content-disposition

bin/elasticsearch-plugin install file:///absolute/path/to/search-guard-2-5.0.0-alpha4-2a.zip

> --
> You received this message because you are subscribed to the Google Groups "Search Guard" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to search-guard...@googlegroups.com.
> To post to this group, send email to search...@googlegroups.com.
> To view this discussion on the web visit https://groups.google.com/d/msgid/search-guard/9e628c36-4439-4e8a-8254-54262cc66958%40googlegroups.com.
> For more options, visit https://groups.google.com/d/optout.

[Brian Walsh]

Thanks very much.  

That got me further.   

Do I still need to install seach-guard-ssl  in a similar manner ?

[Brian Walsh]

Latest experiment ... 

# download into tmp

wget http://search.maven.org/remotecontent\?filepath\=com/floragunn/search-guard-2/5.0.0-alpha4-2a/search-guard-2-5.0.0-alpha4-2a.zip --content-disposition

wget http://search.maven.org/remotecontent?filepath=com/floragunn/search-guard-ssl/5.0.0-alpha4-13a/search-guard-ssl-5.0.0-alpha4-13a.zip --content-disposition

# install both

bin/elasticsearch-plugin install file:///tmp/search-guard-2-5.0.0-alpha4-2a.zip

bin/elasticsearch-plugin install file:///tmp/search-guard-ssl-5.0.0-alpha4-13a.zip

# start ES

Exception in thread "main" java.lang.IllegalArgumentException: Cannot have additional setting [transport.service.type] in plugin [search-guard-2], already added in plugin [search-guard-ssl]

[Brian Walsh]

Appears we don't need to install :-)

# download into tmp

wget http://search.maven.org/remotecontent\?filepath\=com/floragunn/search-guard-2/5.0.0-alpha4-2a/search-guard-2-5.0.0-alpha4-2a.zip --content-disposition

# install both

bin/elasticsearch-plugin install file:///tmp/search-guard-2-5.0.0-alpha4-2a.zip

# config ssl per wiki

searchguard.ssl.transport.keystore_filepath: node-0-keystore.jks
searchguard.ssl.transport.keystore_password: changeit
searchguard.ssl.transport.truststore_filepath: truststore.jks
searchguard.ssl.transport.truststore_password: changeit
searchguard.ssl.transport.enforce_hostname_verification: false

# results ...

elasticsearch | [2016-08-05 16:39:23,677][INFO ][com.floragunn.searchguard.ssl.SearchGuardKeyStore] Open SSL not available (this is not an error, we simply fallback to built-in JDK SSL) because of java.lang.ClassNotFoundException: org.apache.tomcat.jni.SSL

elasticsearch | [2016-08-05 16:39:23,680][INFO ][com.floragunn.searchguard.ssl.SearchGuardKeyStore] Config directory is /usr/share/elasticsearch/config/, from there the key- and truststore files are resolved relatively

elasticsearch | Exception in thread "main" ElasticsearchSecurityException[Error while initializing transport SSL layer: javax.net.ssl.SSLException: failed to initialize the server-side SSL context]; nested: SSLException[failed to initialize the server-side SSL context]; nested: AccessControlException[access denied ("java.security.SecurityPermission" "getProperty.ssl.KeyManagerFactory.algorithm")];

elasticsearch | Likely root cause: java.security.AccessControlException: access denied ("java.security.SecurityPermission" "getProperty.ssl.KeyManagerFactory.algorithm")

elasticsearch | at java.security.AccessControlContext.checkPermission(AccessControlContext.java:472)

elasticsearch | at java.security.AccessController.checkPermission(AccessController.java:884)

elasticsearch | at java.lang.SecurityManager.checkPermission(SecurityManager.java:549)

elasticsearch | at java.security.Security.getProperty(Security.java:760)

elasticsearch | at io.netty.handler.ssl.JdkSslContext.buildKeyManagerFactory(JdkSslContext.java:348)

elasticsearch | at io.netty.handler.ssl.JdkSslServerContext.newSSLContext(JdkSslServerContext.java:245)

elasticsearch | at io.netty.handler.ssl.JdkSslServerContext.<init>(JdkSslServerContext.java:226)

elasticsearch | at io.netty.handler.ssl.SslContext.newServerContextInternal(SslContext.java:405)

elasticsearch | at io.netty.handler.ssl.SslContextBuilder.build(SslContextBuilder.java:391)

elasticsearch | at com.floragunn.searchguard.ssl.SearchGuardKeyStore$1.run(SearchGuardKeyStore.java:518)

elasticsearch | at com.floragunn.searchguard.ssl.SearchGuardKeyStore$1.run(SearchGuardKeyStore.java:515)

elasticsearch | at java.security.AccessController.doPrivileged(Native Method)

elasticsearch | at com.floragunn.searchguard.ssl.SearchGuardKeyStore.buildSSLContext(SearchGuardKeyStore.java:515)

elasticsearch | at com.floragunn.searchguard.ssl.SearchGuardKeyStore.initSSLConfig(SearchGuardKeyStore.java:249)

elasticsearch | at com.floragunn.searchguard.ssl.SearchGuardKeyStore.<init>(SearchGuardKeyStore.java:140)

elasticsearch | at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)

elasticsearch | at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:62)

elasticsearch | at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45)

elasticsearch | at java.lang.reflect.Constructor.newInstance(Constructor.java:423)

elasticsearch | at <<<guice>>>

elasticsearch | at org.elasticsearch.node.Node.<init>(Node.java:287)

elasticsearch | at org.elasticsearch.node.Node.<init>(Node.java:173)

elasticsearch | at org.elasticsearch.bootstrap.Bootstrap$5.<init>(Bootstrap.java:175)

elasticsearch | at org.elasticsearch.bootstrap.Bootstrap.setup(Bootstrap.java:175)

elasticsearch | at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:250)

elasticsearch | at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:96)

elasticsearch | at org.elasticsearch.bootstrap.Elasticsearch.execute(Elasticsearch.java:91)

elasticsearch | at org.elasticsearch.cli.SettingCommand.execute(SettingCommand.java:54)

elasticsearch | at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:91)

elasticsearch | at org.elasticsearch.cli.Command.main(Command.java:53)

elasticsearch | <<<truncated>>>

elasticsearch exited with code 1