# "certificate signed by unknown authority" error in logstash-forwarder

**URL:** <https://discuss.elastic.co/t/certificate-signed-by-unknown-authority-error-in-logstash-forwarder/43656>\
**Category:** Logstash\
**Created:** [March 7, 2016, 1:17pm UTC](https://discuss.elastic.co/t/certificate-signed-by-unknown-authority-error-in-logstash-forwarder/43656 "2016-03-07T13:17:26Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![111112](https://avatars.discourse-cdn.com/v4/letter/1/b3f665/32.png) [@111112](https://discuss.elastic.co/u/111112)\
**Post date:** [March 7, 2016, 1:17pm UTC](https://discuss.elastic.co/t/certificate-signed-by-unknown-authority-error-in-logstash-forwarder/43656/1 "2016-03-07T13:17:26Z")

</div>

Hi All,

I hope someone can help me with this because I am really out of my wits.

We have a working ELK server and a logstash forwarder that is sending logs to it, and they work perfectly fine. I am now installing a new ELK server with the latest version ( so that we can use shield ), and I am trying to make the forwarder send logs to the new server, in parallel to the working now.

I have a problem with the ssl certificate for the new server. I created the crt-key pair as explained in the ELK installation guide, while specifying the FQDN of my ELK server and copied the crt file to the logstash forwarder. However, when I try to run logstash-forwarder with a cofig file that points to the new server and specifies its crt file, I get a "certificate signed by unknown authority" error. curl to the server's host/port with the came certificate, also fails, saying that the certificate is self signed.

As mentioned above, connecting to the working ELK server with a certificate that was generated using the same process is working OK. I compared the certificates using opnsssl x509 and I see that both use FQDN and not IP.

I searched for similar cases and found all kind of stuff, but the bottom line seem to be that it should just work.

So can someone tell me what am I missing here?

Thanks

Oren

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 5:08am UTC](https://discuss.elastic.co/t/certificate-signed-by-unknown-authority-error-in-logstash-forwarder/43656/2 "2017-07-06T05:08:11Z")

</div>

Closed on July 6, 2017, 5:08am UTC