# Attempted to resurrect connection to dead ES instance, but got an error. java.security.cert.CertPathValidatorException: Path does not chain with any of the trust anchors

**URL:** <https://discuss.elastic.co/t/attempted-to-resurrect-connection-to-dead-es-instance-but-got-an-error-java-security-cert-certpathvalidatorexception-path-does-not-chain-with-any-of-the-trust-anchors/201423>\
**Category:** Logstash\
**Tags:** docker\
**Created:** [September 27, 2019, 3:09pm UTC](https://discuss.elastic.co/t/attempted-to-resurrect-connection-to-dead-es-instance-but-got-an-error-java-security-cert-certpathvalidatorexception-path-does-not-chain-with-any-of-the-trust-anchors/201423 "2019-09-27T15:09:57Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![akshatBais](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/akshatbais/32/48993_2.png) [@akshatBais](https://discuss.elastic.co/u/akshatBais)\
**Post date:** [September 27, 2019, 3:09pm UTC](https://discuss.elastic.co/t/attempted-to-resurrect-connection-to-dead-es-instance-but-got-an-error-java-security-cert-certpathvalidatorexception-path-does-not-chain-with-any-of-the-trust-anchors/201423/1 "2019-09-27T15:09:57Z")

</div>

I put the .cert file in elasticsearch and logstash .  
My elasticsearch-kibana connection is working fins with ssl config.  
But wil logstash ssl config it is not somehow connecting or contacting elasticsearch instance.

I have put my .cert file in /etc/ss/certs/ path .

Below is the error i am facing and logstash.yml and my output part of logstash.conf file.

[2019-09-27T20:31:07,219][WARN][logstash.outputs.elasticsearch] Attempted to resurrect connection to dead ES instance, but got an error. {:url=\>"[https://logstash\_system:xxxxxx@application.name.com:9200/](https://logstash_system:xxxxxx@application.name.com:9200/)", :error\_type=\>LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError, :error=\>"Elasticsearch Unreachable: [[https://logstash\_system:xxxxxx@application.name.com:9200/](https://logstash_system:xxxxxx@application.name.com:9200/)][Manticore::ClientProtocolException] PKIX path validation failed: java.security.cert.CertPathValidatorException: Path does not chain with any of the trust anchors"}

http.host: "0.0.0.0"  
xpack.monitoring.enabled: true  
xpack.monitoring.elasticsearch.username: logstash\_system  
xpack.monitoring.elasticsearch.password: welcome123  
xpack.monitoring.elasticsearch.hosts: ['[https://application.name:9200](https://application.name:9200)' ]  
xpack.monitoring.elasticsearch.ssl.certificate\_authority: '/etc/ssl/certs/xyz.crt'

elasticsearch {  
index =\> "%{name}-info-logs"  
ssl =\> true  
cacert =\> '/etc/ssl/certs/xyz.crt'  
sniffing =\> false  
user =\> logstash\_system  
password =\> welcome123  
hosts =\> ["[https://application.name:9200](https://application.name:9200)"]  
}

I am not understanding , why it says that ? If i ping the same :  
logstash\_https://logstash\_system:welcome123@application.name:9200 it gives me the elasticsearch data.

Why from logstash it is not connecting ?

I am running everything through docker.  
I have also linked all docker containers with --link. Before ssl everything was working smoothly , with ssl in picture , may be I am missing something . Please guide me where I am doing wrong. I believe it has nothing to do with docker as before it was running properly without ssl.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 25, 2019, 3:09pm UTC](https://discuss.elastic.co/t/attempted-to-resurrect-connection-to-dead-es-instance-but-got-an-error-java-security-cert-certpathvalidatorexception-path-does-not-chain-with-any-of-the-trust-anchors/201423/2 "2019-10-25T15:09:59Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.