Activate x-pack

alipujaistopo · April 15, 2021, 3:41am

yes. but still error when i write xpack.security.http.ssl.keystore.path .

i think this is more complete log

[2021-04-15T10:28:34,499][INFO ][o.e.n.Node               ] [10.194.11.67] version[7.10.1], pid[20170], build[default/rpm/1c34507e66d7db1211f66f3513706fdf548736aa/2020-12-05T01:00:33.671820Z], OS[Linux/3.10.0-1127.el7.x86_64/amd64], JVM[AdoptOpenJDK/OpenJDK 64-Bit Server VM/15.0.1/15.0.1+9]
[2021-04-15T10:28:34,516][INFO ][o.e.n.Node               ] [10.194.11.67] JVM home [/usr/share/elasticsearch/jdk], using bundled JDK [true]
[2021-04-15T10:28:34,516][INFO ][o.e.n.Node               ] [10.194.11.67] JVM arguments [-Xshare:auto, -Des.networkaddress.cache.ttl=60, -Des.networkaddress.cache.negative.ttl=10, -XX:+AlwaysPreTouch, -Xss1m, -Djava.awt.headless=true, -Dfile.encoding=UTF-8, -Djna.nosys=true, -XX:-OmitStackTraceInFastThrow, -XX:+ShowCodeDetailsInExceptionMessages, -Dio.netty.noUnsafe=true, -Dio.netty.noKeySetOptimization=true, -Dio.netty.recycler.maxCapacityPerThread=0, -Dio.netty.allocator.numDirectArenas=0, -Dlog4j.shutdownHookEnabled=false, -Dlog4j2.disable.jmx=true, -Djava.locale.providers=SPI,COMPAT, -Xms1g, -Xmx1g, -XX:+UseG1GC, -XX:G1ReservePercent=25, -XX:InitiatingHeapOccupancyPercent=30, -Djava.io.tmpdir=/tmp/elasticsearch-1443309297933887382, -XX:+HeapDumpOnOutOfMemoryError, -XX:HeapDumpPath=/var/lib/elasticsearch, -XX:ErrorFile=/var/log/elasticsearch/hs_err_pid%p.log, -Xlog:gc*,gc+age=trace,safepoint:file=/var/log/elasticsearch/gc.log:utctime,pid,tags:filecount=32,filesize=64m, -XX:MaxDirectMemorySize=536870912, -Des.path.home=/usr/share/elasticsearch, -Des.path.conf=/etc/elasticsearch, -Des.distribution.flavor=default, -Des.distribution.type=rpm, -Des.bundled_jdk=true]
[2021-04-15T10:28:36,579][INFO ][o.e.p.PluginsService     ] [10.194.11.67] loaded module [aggs-matrix-stats]
[2021-04-15T10:28:36,580][INFO ][o.e.p.PluginsService     ] [10.194.11.67] loaded module [analysis-common]
[2021-04-15T10:28:36,580][INFO ][o.e.p.PluginsService     ] [10.194.11.67] loaded module [constant-keyword]
[2021-04-15T10:28:36,580][INFO ][o.e.p.PluginsService     ] [10.194.11.67] loaded module [flattened]
[2021-04-15T10:28:36,580][INFO ][o.e.p.PluginsService     ] [10.194.11.67] loaded module [frozen-indices]
[2021-04-15T10:28:36,581][INFO ][o.e.p.PluginsService     ] [10.194.11.67] loaded module [ingest-common]
[2021-04-15T10:28:36,581][INFO ][o.e.p.PluginsService     ] [10.194.11.67] loaded module [ingest-geoip]
[2021-04-15T10:28:36,581][INFO ][o.e.p.PluginsService     ] [10.194.11.67] loaded module [ingest-user-agent]
[2021-04-15T10:28:36,581][INFO ][o.e.p.PluginsService     ] [10.194.11.67] loaded module [kibana]
[2021-04-15T10:28:36,581][INFO ][o.e.p.PluginsService     ] [10.194.11.67] loaded module [lang-expression]
[2021-04-15T10:28:36,581][INFO ][o.e.p.PluginsService     ] [10.194.11.67] loaded module [lang-mustache]
[2021-04-15T10:28:36,581][INFO ][o.e.p.PluginsService     ] [10.194.11.67] loaded module [lang-painless]
[2021-04-15T10:28:36,581][INFO ][o.e.p.PluginsService     ] [10.194.11.67] loaded module [mapper-extras]
[2021-04-15T10:28:36,582][INFO ][o.e.p.PluginsService     ] [10.194.11.67] loaded module [mapper-version]
[2021-04-15T10:28:36,582][INFO ][o.e.p.PluginsService     ] [10.194.11.67] loaded module [parent-join]
[2021-04-15T10:28:36,582][INFO ][o.e.p.PluginsService     ] [10.194.11.67] loaded module [percolator]
[2021-04-15T10:28:36,582][INFO ][o.e.p.PluginsService     ] [10.194.11.67] loaded module [rank-eval]
[2021-04-15T10:28:36,582][INFO ][o.e.p.PluginsService     ] [10.194.11.67] loaded module [reindex]
[2021-04-15T10:28:36,582][INFO ][o.e.p.PluginsService     ] [10.194.11.67] loaded module [repositories-metering-api]
[2021-04-15T10:28:36,582][INFO ][o.e.p.PluginsService     ] [10.194.11.67] loaded module [repository-url]
[2021-04-15T10:28:36,583][INFO ][o.e.p.PluginsService     ] [10.194.11.67] loaded module [search-business-rules]
[2021-04-15T10:28:36,583][INFO ][o.e.p.PluginsService     ] [10.194.11.67] loaded module [searchable-snapshots]
[2021-04-15T10:28:36,583][INFO ][o.e.p.PluginsService     ] [10.194.11.67] loaded module [spatial]
[2021-04-15T10:28:36,583][INFO ][o.e.p.PluginsService     ] [10.194.11.67] loaded module [systemd]
[2021-04-15T10:28:36,583][INFO ][o.e.p.PluginsService     ] [10.194.11.67] loaded module [transform]
[2021-04-15T10:28:36,583][INFO ][o.e.p.PluginsService     ] [10.194.11.67] loaded module [transport-netty4]
[2021-04-15T10:28:36,583][INFO ][o.e.p.PluginsService     ] [10.194.11.67] loaded module [unsigned-long]
[2021-04-15T10:28:36,583][INFO ][o.e.p.PluginsService     ] [10.194.11.67] loaded module [vectors]
[2021-04-15T10:28:36,584][INFO ][o.e.p.PluginsService     ] [10.194.11.67] loaded module [wildcard]
[2021-04-15T10:28:36,584][INFO ][o.e.p.PluginsService     ] [10.194.11.67] loaded module [x-pack-analytics]
[2021-04-15T10:28:36,584][INFO ][o.e.p.PluginsService     ] [10.194.11.67] loaded module [x-pack-async]
[2021-04-15T10:28:36,584][INFO ][o.e.p.PluginsService     ] [10.194.11.67] loaded module [x-pack-async-search]
[2021-04-15T10:28:36,584][INFO ][o.e.p.PluginsService     ] [10.194.11.67] loaded module [x-pack-autoscaling]
[2021-04-15T10:28:36,584][INFO ][o.e.p.PluginsService     ] [10.194.11.67] loaded module [x-pack-ccr]
[2021-04-15T10:28:36,584][INFO ][o.e.p.PluginsService     ] [10.194.11.67] loaded module [x-pack-core]
[2021-04-15T10:28:36,584][INFO ][o.e.p.PluginsService     ] [10.194.11.67] loaded module [x-pack-data-streams]
[2021-04-15T10:28:36,584][INFO ][o.e.p.PluginsService     ] [10.194.11.67] loaded module [x-pack-deprecation]
[2021-04-15T10:28:36,585][INFO ][o.e.p.PluginsService     ] [10.194.11.67] loaded module [x-pack-enrich]
[2021-04-15T10:28:36,585][INFO ][o.e.p.PluginsService     ] [10.194.11.67] loaded module [x-pack-eql]
[2021-04-15T10:28:36,585][INFO ][o.e.p.PluginsService     ] [10.194.11.67] loaded module [x-pack-graph]
[2021-04-15T10:28:36,585][INFO ][o.e.p.PluginsService     ] [10.194.11.67] loaded module [x-pack-identity-provider]
[2021-04-15T10:28:36,585][INFO ][o.e.p.PluginsService     ] [10.194.11.67] loaded module [x-pack-ilm]
[2021-04-15T10:28:36,585][INFO ][o.e.p.PluginsService     ] [10.194.11.67] loaded module [x-pack-logstash]
[2021-04-15T10:28:36,585][INFO ][o.e.p.PluginsService     ] [10.194.11.67] loaded module [x-pack-ml]
[2021-04-15T10:28:36,585][INFO ][o.e.p.PluginsService     ] [10.194.11.67] loaded module [x-pack-monitoring]
[2021-04-15T10:28:36,586][INFO ][o.e.p.PluginsService     ] [10.194.11.67] loaded module [x-pack-ql]
[2021-04-15T10:28:36,586][INFO ][o.e.p.PluginsService     ] [10.194.11.67] loaded module [x-pack-rollup]
[2021-04-15T10:28:36,586][INFO ][o.e.p.PluginsService     ] [10.194.11.67] loaded module [x-pack-security]
[2021-04-15T10:28:36,586][INFO ][o.e.p.PluginsService     ] [10.194.11.67] loaded module [x-pack-sql]
[2021-04-15T10:28:36,586][INFO ][o.e.p.PluginsService     ] [10.194.11.67] loaded module [x-pack-stack]
[2021-04-15T10:28:36,586][INFO ][o.e.p.PluginsService     ] [10.194.11.67] loaded module [x-pack-voting-only-node]
[2021-04-15T10:28:36,586][INFO ][o.e.p.PluginsService     ] [10.194.11.67] loaded module [x-pack-watcher]
[2021-04-15T10:28:36,587][INFO ][o.e.p.PluginsService     ] [10.194.11.67] no plugins loaded
[2021-04-15T10:28:36,628][INFO ][o.e.e.NodeEnvironment    ] [10.194.11.67] using [1] data paths, mounts [[/var (/dev/mapper/rhel-var)]], net usable_space [13.5gb], net total_space [19.9gb], types [xfs]
[2021-04-15T10:28:36,628][INFO ][o.e.e.NodeEnvironment    ] [10.194.11.67] heap size [1gb], compressed ordinary object pointers [true]
[2021-04-15T10:28:36,813][INFO ][o.e.n.Node               ] [10.194.11.67] node name [10.194.11.67], node ID [Xu3toSe1QuCfHghvSMnTuw], cluster name [elasticsearch], roles [transform, master, remote_cluster_client, data, ml, data_content, data_hot, data_warm, data_cold, ingest]
[2021-04-15T10:28:40,132][ERROR][o.e.b.Bootstrap          ] [10.194.11.67] Exception
org.elasticsearch.ElasticsearchSecurityException: failed to load SSL configuration [xpack.security.transport.ssl]
        at org.elasticsearch.xpack.core.ssl.SSLService.lambda$loadSSLConfigurations$5(SSLService.java:528) ~[?:?]
        at java.util.HashMap.forEach(HashMap.java:1425) ~[?:?]
        at java.util.Collections$UnmodifiableMap.forEach(Collections.java:1521) ~[?:?]
        at org.elasticsearch.xpack.core.ssl.SSLService.loadSSLConfigurations(SSLService.java:524) ~[?:?]
        at org.elasticsearch.xpack.core.ssl.SSLService.<init>(SSLService.java:142) ~[?:?]
        at org.elasticsearch.xpack.core.XPackPlugin.createSSLService(XPackPlugin.java:455) ~[?:?]
        at org.elasticsearch.xpack.core.XPackPlugin.createComponents(XPackPlugin.java:288) ~[?:?]
        at org.elasticsearch.node.Node.lambda$new$15(Node.java:553) ~[elasticsearch-7.10.1.jar:7.10.1]
        at java.util.stream.ReferencePipeline$7$1.accept(ReferencePipeline.java:271) ~[?:?]
        at java.util.ArrayList$ArrayListSpliterator.forEachRemaining(ArrayList.java:1625) ~[?:?]
        at java.util.stream.AbstractPipeline.copyInto(AbstractPipeline.java:484) ~[?:?]
        at java.util.stream.AbstractPipeline.wrapAndCopyInto(AbstractPipeline.java:474) ~[?:?]
        at java.util.stream.ReduceOps$ReduceOp.evaluateSequential(ReduceOps.java:913) ~[?:?]
        at java.util.stream.AbstractPipeline.evaluate(AbstractPipeline.java:234) ~[?:?]
        at java.util.stream.ReferencePipeline.collect(ReferencePipeline.java:578) ~[?:?]
        at org.elasticsearch.node.Node.<init>(Node.java:557) ~[elasticsearch-7.10.1.jar:7.10.1]
        at org.elasticsearch.node.Node.<init>(Node.java:289) ~[elasticsearch-7.10.1.jar:7.10.1]
        at org.elasticsearch.bootstrap.Bootstrap$5.<init>(Bootstrap.java:227) ~[elasticsearch-7.10.1.jar:7.10.1]
        at org.elasticsearch.bootstrap.Bootstrap.setup(Bootstrap.java:227) ~[elasticsearch-7.10.1.jar:7.10.1]
        at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:393) [elasticsearch-7.10.1.jar:7.10.1]
        at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:170) [elasticsearch-7.10.1.jar:7.10.1]
        at org.elasticsearch.bootstrap.Elasticsearch.execute(Elasticsearch.java:161) [elasticsearch-7.10.1.jar:7.10.1]
        at org.elasticsearch.cli.EnvironmentAwareCommand.execute(EnvironmentAwareCommand.java:86) [elasticsearch-7.10.1.jar:7.10.1]
        at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:127) [elasticsearch-cli-7.10.1.jar:7.10.1]
        at org.elasticsearch.cli.Command.main(Command.java:90) [elasticsearch-cli-7.10.1.jar:7.10.1]
        at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:126) [elasticsearch-7.10.1.jar:7.10.1]
        at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:92) [elasticsearch-7.10.1.jar:7.10.1]

alipujaistopo · April 15, 2021, 3:42am

 Caused by: org.elasticsearch.ElasticsearchException: failed to initialize SSL TrustManager
            at org.elasticsearch.xpack.core.ssl.StoreTrustConfig.createTrustManager(StoreTrustConfig.java:74) ~[?:?]
            at org.elasticsearch.xpack.core.ssl.SSLService.createSslContext(SSLService.java:437) ~[?:?]
            at java.util.HashMap.computeIfAbsent(HashMap.java:1224) ~[?:?]
            at org.elasticsearch.xpack.core.ssl.SSLService.lambda$loadSSLConfigurations$5(SSLService.java:526) ~[?:?]
            ... 26 more
    Caused by: java.io.IOException: keystore password was incorrect
            at sun.security.pkcs12.PKCS12KeyStore.engineLoad(PKCS12KeyStore.java:2103) ~[?:?]
            at sun.security.util.KeyStoreDelegator.engineLoad(KeyStoreDelegator.java:220) ~[?:?]
            at java.security.KeyStore.load(KeyStore.java:1472) ~[?:?]
            at org.elasticsearch.xpack.core.ssl.TrustConfig.getStore(TrustConfig.java:97) ~[?:?]
            at org.elasticsearch.xpack.core.ssl.StoreTrustConfig.createTrustManager(StoreTrustConfig.java:65) ~[?:?]
            at org.elasticsearch.xpack.core.ssl.SSLService.createSslContext(SSLService.java:437) ~[?:?]
            at java.util.HashMap.computeIfAbsent(HashMap.java:1224) ~[?:?]
            at org.elasticsearch.xpack.core.ssl.SSLService.lambda$loadSSLConfigurations$5(SSLService.java:526) ~[?:?]
            ... 26 more
    Caused by: java.security.UnrecoverableKeyException: failed to decrypt safe contents entry: javax.crypto.BadPaddingException: Given final block not properly padded. Such issues can arise if a bad key is used during decryption.
            at sun.security.pkcs12.PKCS12KeyStore.engineLoad(PKCS12KeyStore.java:2103) ~[?:?]
            at sun.security.util.KeyStoreDelegator.engineLoad(KeyStoreDelegator.java:220) ~[?:?]
            at java.security.KeyStore.load(KeyStore.java:1472) ~[?:?]
            at org.elasticsearch.xpack.core.ssl.TrustConfig.getStore(TrustConfig.java:97) ~[?:?]
            at org.elasticsearch.xpack.core.ssl.StoreTrustConfig.createTrustManager(StoreTrustConfig.java:65) ~[?:?]
            at org.elasticsearch.xpack.core.ssl.SSLService.createSslContext(SSLService.java:437) ~[?:?]
            at java.util.HashMap.computeIfAbsent(HashMap.java:1224) ~[?:?]
            at org.elasticsearch.xpack.core.ssl.SSLService.lambda$loadSSLConfigurations$5(SSLService.java:526) ~[?:?]
            ... 26 more
    [2021-04-15T10:28:40,139][ERROR][o.e.b.ElasticsearchUncaughtExceptionHandler] [10.194.11.67] uncaught exception in thread [main]
    org.elasticsearch.bootstrap.StartupException: ElasticsearchSecurityException[failed to load SSL configuration [xpack.security.transport.ssl]]; nested: ElasticsearchException[failed to initialize SSL TrustManager]; nested: IOException[keystore password was incorrect]; nested: UnrecoverableKeyException[failed to decrypt safe contents entry: javax.crypto.BadPaddingException: Given final block not properly padded. Such issues can arise if a bad key is used during decryption.];
            at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:174) ~[elasticsearch-7.10.1.jar:7.10.1]
            at org.elasticsearch.bootstrap.Elasticsearch.execute(Elasticsearch.java:161) ~[elasticsearch-7.10.1.jar:7.10.1]
            at org.elasticsearch.cli.EnvironmentAwareCommand.execute(EnvironmentAwareCommand.java:86) ~[elasticsearch-7.10.1.jar:7.10.1]
            at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:127) ~[elasticsearch-cli-7.10.1.jar:7.10.1]
            at org.elasticsearch.cli.Command.main(Command.java:90) ~[elasticsearch-cli-7.10.1.jar:7.10.1]
            at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:126) ~[elasticsearch-7.10.1.jar:7.10.1]
            at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:92) ~[elasticsearch-7.10.1.jar:7.10.1]
    Caused by: org.elasticsearch.ElasticsearchSecurityException: failed to load SSL configuration [xpack.security.transport.ssl]
            at org.elasticsearch.xpack.core.ssl.SSLService.lambda$loadSSLConfigurations$5(SSLService.java:528) ~[?:?]
            at java.util.HashMap.forEach(HashMap.java:1425) ~[?:?]
            at java.util.Collections$UnmodifiableMap.forEach(Collections.java:1521) ~[?:?]
            at org.elasticsearch.xpack.core.ssl.SSLService.loadSSLConfigurations(SSLService.java:524) ~[?:?]
            at org.elasticsearch.xpack.core.ssl.SSLService.<init>(SSLService.java:142) ~[?:?]
            at org.elasticsearch.xpack.core.XPackPlugin.createSSLService(XPackPlugin.java:455) ~[?:?]
            at org.elasticsearch.xpack.core.XPackPlugin.createComponents(XPackPlugin.java:288) ~[?:?]
            at org.elasticsearch.node.Node.lambda$new$15(Node.java:553) ~[elasticsearch-7.10.1.jar:7.10.1]
            at java.util.stream.ReferencePipeline$7$1.accept(ReferencePipeline.java:271) ~[?:?]
            at java.util.ArrayList$ArrayListSpliterator.forEachRemaining(ArrayList.java:1625) ~[?:?]
            at java.util.stream.AbstractPipeline.copyInto(AbstractPipeline.java:484) ~[?:?]
            at java.util.stream.AbstractPipeline.wrapAndCopyInto(AbstractPipeline.java:474) ~[?:?]
            at java.util.stream.ReduceOps$ReduceOp.evaluateSequential(ReduceOps.java:913) ~[?:?]
            at java.util.stream.AbstractPipeline.evaluate(AbstractPipeline.java:234) ~[?:?]
            at java.util.stream.ReferencePipeline.collect(ReferencePipeline.java:578) ~[?:?]
            at org.elasticsearch.node.Node.<init>(Node.java:557) ~[elasticsearch-7.10.1.jar:7.10.1]
            at org.elasticsearch.node.Node.<init>(Node.java:289) ~[elasticsearch-7.10.1.jar:7.10.1]
            at org.elasticsearch.bootstrap.Bootstrap$5.<init>(Bootstrap.java:227) ~[elasticsearch-7.10.1.jar:7.10.1]
            at org.elasticsearch.bootstrap.Bootstrap.setup(Bootstrap.java:227) ~[elasticsearch-7.10.1.jar:7.10.1]
            at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:393) ~[elasticsearch-7.10.1.jar:7.10.1]
            at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:170) ~[elasticsearch-7.10.1.jar:7.10.1]
            ... 6 more
    Caused by: org.elasticsearch.ElasticsearchException: failed to initialize SSL TrustManager
            at org.elasticsearch.xpack.core.ssl.StoreTrustConfig.createTrustManager(StoreTrustConfig.java:74) ~[?:?]
            at org.elasticsearch.xpack.core.ssl.SSLService.createSslContext(SSLService.java:437) ~[?:?]
            at java.util.HashMap.computeIfAbsent(HashMap.java:1224) ~[?:?]
            at org.elasticsearch.xpack.core.ssl.SSLService.lambda$loadSSLConfigurations$5(SSLService.java:526) ~[?:?]
            at java.util.HashMap.forEach(HashMap.java:1425) ~[?:?]
            at java.util.Collections$UnmodifiableMap.forEach(Collections.java:1521) ~[?:?]
            at org.elasticsearch.xpack.core.ssl.SSLService.loadSSLConfigurations(SSLService.java:524) ~[?:?]
            at org.elasticsearch.xpack.core.ssl.SSLService.<init>(SSLService.java:142) ~[?:?]
            at org.elasticsearch.xpack.core.XPackPlugin.createSSLService(XPackPlugin.java:455) ~[?:?]
            at org.elasticsearch.xpack.core.XPackPlugin.createComponents(XPackPlugin.java:288) ~[?:?]
            at org.elasticsearch.node.Node.lambda$new$15(Node.java:553) ~[elasticsearch-7.10.1.jar:7.10.1]
            at java.util.stream.ReferencePipeline$7$1.accept(ReferencePipeline.java:271) ~[?:?]
            at java.util.ArrayList$ArrayListSpliterator.forEachRemaining(ArrayList.java:1625) ~[?:?]
            at java.util.stream.AbstractPipeline.copyInto(AbstractPipeline.java:484) ~[?:?]
            at java.util.stream.AbstractPipeline.wrapAndCopyInto(AbstractPipeline.java:474) ~[?:?]
            at java.util.stream.ReduceOps$ReduceOp.evaluateSequential(ReduceOps.java:913) ~[?:?]
            at java.util.stream.AbstractPipeline.evaluate(AbstractPipeline.java:234) ~[?:?]
            at java.util.stream.ReferencePipeline.collect(ReferencePipeline.java:578) ~[?:?]
            at org.elasticsearch.node.Node.<init>(Node.java:557) ~[elasticsearch-7.10.1.jar:7.10.1]
            at org.elasticsearch.node.Node.<init>(Node.java:289) ~[elasticsearch-7.10.1.jar:7.10.1]
            at org.elasticsearch.bootstrap.Bootstrap$5.<init>(Bootstrap.java:227) ~[elasticsearch-7.10.1.jar:7.10.1]
            at org.elasticsearch.bootstrap.Bootstrap.setup(Bootstrap.java:227) ~[elasticsearch-7.10.1.jar:7.10.1]
            at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:393) ~[elasticsearch-7.10.1.jar:7.10.1]
            at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:170) ~[elasticsearch-7.10.1.jar:7.10.1]
            ... 6 more
    Caused by: java.io.IOException: keystore password was incorrect
            at sun.security.pkcs12.PKCS12KeyStore.engineLoad(PKCS12KeyStore.java:2103) ~[?:?]
            at sun.security.util.KeyStoreDelegator.engineLoad(KeyStoreDelegator.java:220) ~[?:?]
            at java.security.KeyStore.load(KeyStore.java:1472) ~[?:?]
            at org.elasticsearch.xpack.core.ssl.TrustConfig.getStore(TrustConfig.java:97) ~[?:?]
            at org.elasticsearch.xpack.core.ssl.StoreTrustConfig.createTrustManager(StoreTrustConfig.java:65) ~[?:?]
            at org.elasticsearch.xpack.core.ssl.SSLService.createSslContext(SSLService.java:437) ~[?:?]
            at java.util.HashMap.computeIfAbsent(HashMap.java:1224) ~[?:?]
            at org.elasticsearch.xpack.core.ssl.SSLService.lambda$loadSSLConfigurations$5(SSLService.java:526) ~[?:?]
            at java.util.HashMap.forEach(HashMap.java:1425) ~[?:?]
            at java.util.Collections$UnmodifiableMap.forEach(Collections.java:1521) ~[?:?]
            at org.elasticsearch.xpack.core.ssl.SSLService.loadSSLConfigurations(SSLService.java:524) ~[?:?]
            at org.elasticsearch.xpack.core.ssl.SSLService.<init>(SSLService.java:142) ~[?:?]
            at org.elasticsearch.xpack.core.XPackPlugin.createSSLService(XPackPlugin.java:455) ~[?:?]
            at org.elasticsearch.xpack.core.XPackPlugin.createComponents(XPackPlugin.java:288) ~[?:?]
            at org.elasticsearch.node.Node.lambda$new$15(Node.java:553) ~[elasticsearch-7.10.1.jar:7.10.1]
            at java.util.stream.ReferencePipeline$7$1.accept(ReferencePipeline.java:271) ~[?:?]
            at java.util.ArrayList$ArrayListSpliterator.forEachRemaining(ArrayList.java:1625) ~[?:?]
            at java.util.stream.AbstractPipeline.copyInto(AbstractPipeline.java:484) ~[?:?]
            at java.util.stream.AbstractPipeline.wrapAndCopyInto(AbstractPipeline.java:474) ~[?:?]
            at java.util.stream.ReduceOps$ReduceOp.evaluateSequential(ReduceOps.java:913) ~[?:?]
            at java.util.stream.AbstractPipeline.evaluate(AbstractPipeline.java:234) ~[?:?]
            at java.util.stream.ReferencePipeline.collect(ReferencePipeline.java:578) ~[?:?]
            at org.elasticsearch.node.Node.<init>(Node.java:557) ~[elasticsearch-7.10.1.jar:7.10.1]
            at org.elasticsearch.node.Node.<init>(Node.java:289) ~[elasticsearch-7.10.1.jar:7.10.1]
            at org.elasticsearch.bootstrap.Bootstrap$5.<init>(Bootstrap.java:227) ~[elasticsearch-7.10.1.jar:7.10.1]
            at org.elasticsearch.bootstrap.Bootstrap.setup(Bootstrap.java:227) ~[elasticsearch-7.10.1.jar:7.10.1]
            at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:393) ~[elasticsearch-7.10.1.jar:7.10.1]
            at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:170) ~[elasticsearch-7.10.1.jar:7.10.1]
            ... 6 more
    Caused by: java.security.UnrecoverableKeyException: failed to decrypt safe contents entry: javax.crypto.BadPaddingException: Given final block not properly padded. Such issues can arise if a bad key is used during decryption.
            at sun.security.pkcs12.PKCS12KeyStore.engineLoad(PKCS12KeyStore.java:2103) ~[?:?]
            at sun.security.util.KeyStoreDelegator.engineLoad(KeyStoreDelegator.java:220) ~[?:?]
            at java.security.KeyStore.load(KeyStore.java:1472) ~[?:?]
            at org.elasticsearch.xpack.core.ssl.TrustConfig.getStore(TrustConfig.java:97) ~[?:?]

here's the part 2

alipujaistopo · April 15, 2021, 3:42am

  at org.elasticsearch.xpack.core.ssl.StoreTrustConfig.createTrustManager(StoreTrustConfig.java:65) ~[?:?]
                at org.elasticsearch.xpack.core.ssl.SSLService.createSslContext(SSLService.java:437) ~[?:?]
                at java.util.HashMap.computeIfAbsent(HashMap.java:1224) ~[?:?]
                at org.elasticsearch.xpack.core.ssl.SSLService.lambda$loadSSLConfigurations$5(SSLService.java:526) ~[?:?]
                at java.util.HashMap.forEach(HashMap.java:1425) ~[?:?]
                at java.util.Collections$UnmodifiableMap.forEach(Collections.java:1521) ~[?:?]
                at org.elasticsearch.xpack.core.ssl.SSLService.loadSSLConfigurations(SSLService.java:524) ~[?:?]
                at org.elasticsearch.xpack.core.ssl.SSLService.<init>(SSLService.java:142) ~[?:?]
                at org.elasticsearch.xpack.core.XPackPlugin.createSSLService(XPackPlugin.java:455) ~[?:?]
                at org.elasticsearch.xpack.core.XPackPlugin.createComponents(XPackPlugin.java:288) ~[?:?]
                at org.elasticsearch.node.Node.lambda$new$15(Node.java:553) ~[elasticsearch-7.10.1.jar:7.10.1]
                at java.util.stream.ReferencePipeline$7$1.accept(ReferencePipeline.java:271) ~[?:?]
                at java.util.ArrayList$ArrayListSpliterator.forEachRemaining(ArrayList.java:1625) ~[?:?]
                at java.util.stream.AbstractPipeline.copyInto(AbstractPipeline.java:484) ~[?:?]
                at java.util.stream.AbstractPipeline.wrapAndCopyInto(AbstractPipeline.java:474) ~[?:?]
                at java.util.stream.ReduceOps$ReduceOp.evaluateSequential(ReduceOps.java:913) ~[?:?]
                at java.util.stream.AbstractPipeline.evaluate(AbstractPipeline.java:234) ~[?:?]
                at java.util.stream.ReferencePipeline.collect(ReferencePipeline.java:578) ~[?:?]
                at org.elasticsearch.node.Node.<init>(Node.java:557) ~[elasticsearch-7.10.1.jar:7.10.1]
                at org.elasticsearch.node.Node.<init>(Node.java:289) ~[elasticsearch-7.10.1.jar:7.10.1]
                at org.elasticsearch.bootstrap.Bootstrap$5.<init>(Bootstrap.java:227) ~[elasticsearch-7.10.1.jar:7.10.1]
                at org.elasticsearch.bootstrap.Bootstrap.setup(Bootstrap.java:227) ~[elasticsearch-7.10.1.jar:7.10.1]
                at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:393) ~[elasticsearch-7.10.1.jar:7.10.1]
                at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:170) ~[elasticsearch-7.10.1.jar:7.10.1]
                ...t java.util.stream.AbstractPipeline.copyInto(AbstractPipeline.java:484) ~[?:?]
                at java.util.stream.AbstractPipeline.wrapAndCopyInto(AbstractPipeline.java:474) ~[?:?]
                at java.util.stream.ReduceOps$ReduceOp.evaluateSequential(ReduceOps.java:913) ~[?:?]
                at java.util.stream.AbstractPipeline.evaluate(AbstractPipeline.java:234) ~[?:?]
                at java.util.stream.ReferencePipeline.collect(ReferencePipeline.java:578) ~[?:?]
                at org.elasticsearch.node.Node.<init>(Node.java:557) ~[elasticsearch-7.10.1.jar:7.10.1]
                at org.elasticsearch.node.Node.<init>(Node.java:289) ~[elasticsearch-7.10.1.jar:7.10.1]
                at org.elasticsearch.bootstrap.Bootstrap$5.<init>(Bootstrap.java:227) ~[elasticsearch-7.10.1.jar:7.10.1]
                at org.elasticsearch.bootstrap.Bootstrap.setup(Bootstrap.java:227) ~[elasticsearch-7.10.1.jar:7.10.1]
                at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:393) ~[elasticsearch-7.10.1.jar:7.10.1]
                at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:170) ~[elasticsearch-7.10.1.jar:7.10.1]
                ... 6 more
        Caused by: java.security.UnrecoverableKeyException: failed to decrypt safe contents entry: javax.crypto.BadPaddingException: Given final block not properly padded. Such issues can arise if a bad key is used during decryption.
                at sun.security.pkcs12.PKCS12KeyStore.engineLoad(PKCS12KeyStore.java:2103) ~[?:?]
                at sun.security.util.KeyStoreDelegator.engineLoad(KeyStoreDelegator.java:220) ~[?:?]
                at java.security.KeyStore.load(KeyStore.java:1472) ~[?:?]
                at org.elasticsearch.xpack.core.ssl.TrustConfig.getStore(TrustConfig.java:97) ~[?:?]
                at org.elasticsearch.xpack.core.ssl.StoreTrustConfig.createTrustManager(StoreTrustConfig.java:65) ~[?:?]
                at org.elasticsearch.xpack.core.ssl.SSLService.createSslContext(SSLService.java:437) ~[?:?]
                at java.util.HashMap.computeIfAbsent(HashMap.java:1224) ~[?:?]
                at org.elasticsearch.xpack.core.ssl.SSLService.lambda$loadSSLConfigurations$5(SSLService.java:526) ~[?:?]
                at java.util.HashMap.forEach(HashMap.java:1425) ~[?:?]
                at java.util.Collections$UnmodifiableMap.forEach(Collections.java:1521) ~[?:?]
                at org.elasticsearch.xpack.core.ssl.SSLService.loadSSLConfigurations(SSLService.java:524) ~[?:?]
                at org.elasticsearch.xpack.core.ssl.SSLService.<init>(SSLService.java:142) ~[?:?]
                at org.elasticsearch.xpack.core.XPackPlugin.createSSLService(XPackPlugin.java:455) ~[?:?]
                at org.elasticsearch.xpack.core.XPackPlugin.createComponents(XPackPlugin.java:288) ~[?:?]
                at org.elasticsearch.node.Node.lambda$new$15(Node.java:553) ~[elasticsearch-7.10.1.jar:7.10.1]
                at java.util.stream.ReferencePipeline$7$1.accept(ReferencePipeline.java:271) ~[?:?]
                at java.util.ArrayList$ArrayListSpliterator.forEachRemaining(ArrayList.java:1625) ~[?:?]
                at java.util.stream.AbstractPipeline.copyInto(AbstractPipeline.java:484) ~[?:?]
                at java.util.stream.AbstractPipeline.wrapAndCopyInto(AbstractPipeline.java:474) ~[?:?]
                at java.util.stream.ReduceOps$ReduceOp.evaluateSequential(ReduceOps.java:913) ~[?:?]
                at java.util.stream.AbstractPipeline.evaluate(AbstractPipeline.java:234) ~[?:?]
                at java.util.stream.ReferencePipeline.collect(ReferencePipeline.java:578) ~[?:?]
                at org.elasticsearch.node.Node.<init>(Node.java:557) ~[elasticsearch-7.10.1.jar:7.10.1]
                at org.elasticsearch.node.Node.<init>(Node.java:289) ~[elasticsearch-7.10.1.jar:7.10.1]
                at org.elasticsearch.bootstrap.Bootstrap$5.<init>(Bootstrap.java:227) ~[elasticsearch-7.10.1.jar:7.10.1]
                at org.elasticsearch.bootstrap.Bootstrap.setup(Bootstrap.java:227) ~[elasticsearch-7.10.1.jar:7.10.1]
                at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:393) ~[elasticsearch-7.10.1.jar:7.10.1]
                at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:170) ~[elasticsearch-7.10.1.jar:7.10.1]
         6 more

and this the last part

dadoonet · April 15, 2021, 6:43am

Did you see:

failed to load SSL configuration [xpack.security.transport.ssl]]; nested: ElasticsearchException[failed to initialize SSL TrustManager]; nested: IOException[keystore password was incorrect]; nested: UnrecoverableKeyException[failed to decrypt safe contents entry: javax.crypto.BadPaddingException: Given final block not properly padded. Such issues can arise if a bad key is used during decryption.

alipujaistopo · April 15, 2021, 7:31am

yes David, then what should i do?

dadoonet · April 15, 2021, 9:42am

I guess that something is wrong with that.

I don't have experience in that. So I'd recommend that you start from scratch again from that page: Set up basic security for the Elastic Stack | Elasticsearch Guide [7.12] | Elastic

And if any of the steps provided in the guide does not work for you, share the step and the detailed messages...

alipujaistopo · April 15, 2021, 10:15am

ah okay i will start from scratch again. thanks anyway David

system · May 13, 2021, 10:15am

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Elastic Search can't setup password for Kibana Elasticsearch elastic-stack-security	14	4685	September 11, 2019
X-pack security for elastic search Elasticsearch	5	424	July 25, 2018
X-pack in 6.3 version Elasticsearch	5	498	October 22, 2018
X-Pack Security Not Working Elasticsearch	21	19936	January 8, 2018
How can i use X PACK? Elasticsearch	8	389	August 7, 2019

Activate x-pack

Related topics