# Can't establish a secure connection

**URL:** <https://discuss.elastic.co/t/cant-establish-a-secure-connection/299224>\
**Category:** Kibana\
**Tags:** docker\
**Created:** [March 9, 2022, 1:14pm UTC](https://discuss.elastic.co/t/cant-establish-a-secure-connection/299224 "2022-03-09T13:14:12Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![bibilena](https://avatars.discourse-cdn.com/v4/letter/b/e9bcb4/32.png) [@bibilena](https://discuss.elastic.co/u/bibilena)\
**Post date:** [March 9, 2022, 1:14pm UTC](https://discuss.elastic.co/t/cant-establish-a-secure-connection/299224/1 "2022-03-09T13:14:13Z")

</div>

Hello, I have some problem: I have a docker-compose with Elasticsearch, Kibana and Enterprise Search. all work locally but I need https to use connector with a custom domain name. When I try, I have an error:

"Safari can't open the page [https://192.168.102.50:5601](https://192.168.102.50:5601) because Safari can't establish a secure connection to the server 192.168.102.50"

I have a certificate and private key from letsencrypt. I don't know what I can do. can you help me?

here is my docker-compose

```auto
version: '2'
networks:
 elastic:
   driver: bridge 

volumes:
 elasticsearch:
   driver: local
 certs:  

services:
  elasticsearch:
    image: docker.elastic.co/elasticsearch/elasticsearch:7.17.1
    restart: unless-stopped
    container_name: node1
    environment:
      cluster.name: my_cluster
      node.name: node1"  
      discovery.type: single-node
      ES_JAVA_OPTS: -Xms512m -Xmx512m
      xpack.security.enabled: "true"
      xpack.security.authc.api_key.enabled: "true"
      xpack.security.audit.enabled: "true"  
      ELASTIC_PASSWORD: ${ELASTIC_PASSWORD}
      xpack.security.transport.ssl.enabled: "true"
      xpack.security.transport.ssl.verification_mode: certificate 
      xpack.security.transport.ssl.certificate: /usr/share/elasticsearch/config/certificates/fullchain.pem
      xpack.security.transport.ssl.key: /usr/share/elasticsearch/config/certificates/privkey.pem
      xpack.security.transport.ssl.certificate_authorities: /usr/share/elasticsearch/config/certificates/ca-certificates.crt
      xpack.security.http.ssl.verification_mode: certificate
      xpack.security.http.ssl.enabled: "true"
      #xpack.security.http.ssl.client_authentication: optional
      xpack.security.http.ssl.certificate_authorities: /usr/share/elasticsearch/config/certificates/ca-certificates.crt
      xpack.security.http.ssl.key: /usr/share/elasticsearch/config/certificates/privkey.pem
      xpack.security.http.ssl.certificate: /usr/share/elasticsearch/config/certificates/fullchain.pem
    ulimits:
      memlock:
        soft: -1
        hard: -1
    volumes:
      - elasticsearch:/usr/share/elasticsearch/data
      - /home/lenaic/ela/certs:$CERTS_DIR
    ports:
      - 9200:9200
    networks:
      - elastic

  ent-search:
    image: docker.elastic.co/enterprise-search/enterprise-search:7.17.1
    restart: unless-stopped
    depends_on:
      - "elasticsearch"
    environment:
      - "JAVA_OPTS=-Xms512m -Xmx512m"
      - "ENT_SEARCH_DEFAULT_PASSWORD=${ELASTIC_PASSWORD}"
      - "elasticsearch.username=elastic"
      - "elasticsearch.password=${ELASTIC_PASSWORD}"
      - "elasticsearch.host=https://elastic.mirahi.cloud:9200"
      - "allow_es_settings_modification=true"
      - "secret_management.encryption_keys=[${SECRET_MANAGEMENT_ENCRYPTION}]"
      - "elasticsearch.startup_retry.interval=15"
      - "ent_search.external_url=http://elastic.mirahi.cloud:3002"
      - "kibana.external_url=https://elastic.mirahi.cloud:5601"
      - "elasticsearch.ssl.enabled:true"
      - "elasticsearch.ssl.certificate:/usr/share/elasticsearch/config/certificates/fullchain.pem"
      - "elasticsearch.ssl.key:/usr/share/elasticsearch/config/certificates/privkey.pem"  
    ports:
      - 3002:3002
    networks:
      - elastic

  kibana:
    image: docker.elastic.co/kibana/kibana:7.17.1
    restart: unless-stopped
    depends_on:
      - "elasticsearch"
      - "ent-search"
    ports:
      - 5601:5601
    environment:
      ELASTICSEARCH_HOSTS: https://elastic.mirahi.cloud:9200
      enterpriseSearch.host: https://elastic.mirahi.cloud:3002
      ELASTICSEARCH_USERNAME: elastic
      server.host: 192.168.102.50
      server.name: elastic.mirahi.cloud
      elasticsearch_url: "https://192.168.102.50:9200"
      ELASTICSEARCH_PASSWORD: ${ELASTIC_PASSWORD}
      enterpriseSearch.ssl.verificationMode: certificate
      server.ssl.enable: "true"
      server.ssl.certificate: /usr/share/elasticsearch/config/certificates/fullchain.pem
      server.ssl.key: /usr/share/elasticsearch/config/certificates/privkey.pem
      elasticsearch.ssl.certificate: /usr/share/elasticsearch/config/certificates/fullchain.pem
      elasticsearch.ssl.verificationMode: certificate
      #elasticsearch.ssl.certificateAuthorities: /usr/share/elasticsearch/config/certificates/ca-certificates.crt
      elasticsearch.ssl.key: /usr/share/elasticsearch/config/certificates/privkey.pem
    networks:
      - elastic
    volumes:
      - /home/lenaic/ela/certs:$CERTS_DIR
      #- certs:$CERTS_DIR

```

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [March 9, 2022, 9:50pm UTC](https://discuss.elastic.co/t/cant-establish-a-secure-connection/299224/2 "2022-03-09T21:50:45Z")

</div>

What do your Elasticsearch logs show?

> [@bibilena](#):
>
> `ES_JAVA_OPTS: -Xms512m -Xmx512m`

That's probably not enough to work with, you should really aim to start at 2GB.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 6, 2022, 9:51pm UTC](https://discuss.elastic.co/t/cant-establish-a-secure-connection/299224/3 "2022-04-06T21:51:36Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.