# Client request error: self signed certificate

**URL:** <https://discuss.elastic.co/t/client-request-error-self-signed-certificate/100343>\
**Category:** Kibana\
**Created:** [September 13, 2017, 11:16am UTC](https://discuss.elastic.co/t/client-request-error-self-signed-certificate/100343 "2017-09-13T11:16:54Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![dreadlocked1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dreadlocked1/32/22072_2.png) [@dreadlocked1](https://discuss.elastic.co/u/dreadlocked1)\
**Post date:** [September 13, 2017, 11:16am UTC](https://discuss.elastic.co/t/client-request-error-self-signed-certificate/100343/1 "2017-09-13T11:16:54Z")

</div>

Hi, I've got the following configuration

Nginx as reverse proxy for Elasticsearch with basic authentication and a self-signed certificate. I point my Kibana to the reverse proxy: [https://192.168.X.X](https://192.168.X.X) and indicating the elasticsearch.username and elasticsearch.password correctly. Everything seems to work but I got two errors:

First: When I try to use the KIbana Console I obtain the error "Client request error: self signed certificate" and I don't know what attribute I need to change to not verify the certificate.

Second: When I try to use Timelion I get "Timelion: Error: in cell #1: [reduce\_search\_phase\_exception] [reduce]", I already added the "scripts.inline: true" and "scripts.store: true" to the elasticsearch.yml, but this doesn't work.

Can anyone help me?

Thanks!

---

<div class="post-metadata">

**Author:** ![LeeDr](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leedr/32/9289_2.png) [@LeeDr](https://discuss.elastic.co/u/LeeDr)\
**Post date:** [September 18, 2017, 4:30pm UTC](https://discuss.elastic.co/t/client-request-error-self-signed-certificate/100343/2 "2017-09-18T16:30:59Z")

</div>

It might help to install your self-signed certs in your local trust store. Are you on Ubuntu? If so, here's some bash commands I use to set up a Ubuntu VM (and I disable IPv6 since my certs don't have it included);

```auto
  cp $QADIR/../certs/ca/ca.crt /usr/local/share/ca-certificates/
  cp $QADIR/../certs/elasticsearch/elasticsearch.crt /usr/local/share/ca-certificates/
  cp $QADIR/../certs/kibana/kibana.crt /usr/local/share/ca-certificates/
  update-ca-certificates

  echo "net.ipv6.conf.all.disable_ipv6 = 1" >> /etc/sysctl.conf
  echo "net.ipv6.conf.default.disable_ipv6 = 1" >> /etc/sysctl.conf
  echo "net.ipv6.conf.lo.disable_ipv6 = 1" >> /etc/sysctl.conf
  sysctl -p
  cat /proc/sys/net/ipv6/conf/all/disable_ipv6

```

Redhat/CentOS is a little different directories and commands;

```auto
  cp $QADIR/../certs/kibana/kibana.crt /etc/pki/ca-trust/source/anchors/
  sudo update-ca-trust extract

```

Maybe fixing your first issue will resolve the second issue?

Regards,  
Lee

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 16, 2017, 4:31pm UTC](https://discuss.elastic.co/t/client-request-error-self-signed-certificate/100343/3 "2017-10-16T16:31:09Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.