# Debug errors between filebeat and logstash

**URL:** <https://discuss.elastic.co/t/debug-errors-between-filebeat-and-logstash/119885>\
**Category:** Logstash\
**Created:** [February 14, 2018, 10:03pm UTC](https://discuss.elastic.co/t/debug-errors-between-filebeat-and-logstash/119885 "2018-02-14T22:03:58Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![bm1391](https://avatars.discourse-cdn.com/v4/letter/b/65b543/32.png) [@bm1391](https://discuss.elastic.co/u/bm1391)\
**Post date:** [February 14, 2018, 10:03pm UTC](https://discuss.elastic.co/t/debug-errors-between-filebeat-and-logstash/119885/1 "2018-02-14T22:03:58Z")

</div>

I have set up mutual auth for the connection between filebeat and logstash. However, I am getting some errors .

Here is my logstash config:

> ```
> beats {
> port => 5044
> ssl => true
> ssl_certificate_authorities => ["/home/monitor/ca/rootCA.pem"]
> ssl_certificate => "/home/monitor/ca/davos.crt"
> ssl_key => "/home/monitor/ca/davos.key"
> ssl_verify_mode => "force_peer"
> # ssl_verify_mode => "none"
> }
> 
> ```

Filebeat config:

> ```
> certificate_authorities: ["/etc/filebeat/rootCA.crt"]
> 
> # Certificate for TLS client authentication
> certificate: "/etc/filebeat/client1.crt"
> 
> # Client Certificate Key
> certificate_key: "/etc/filebeat/client1.key"
> 
> ```

**I am** able to transfer the data and no errors come out except for when I try to validate the certificate of the client side I receive:

`curl -v --cacert rootCA.pem https://myip:5044`

> [2018-02-14T22:00:48,635][INFO][org.logstash.beats.BeatsHandler] [local: 0.0.0.0:5044, remote: publicip:18757] Exception: javax.net.ssl.SSLHandshakeException: error:100000c0:SSL routines:OPENSSL\_internal:PEER\_DID\_NOT\_RETURN\_A\_CERTIFICATE

Thanks for any help

A thought: is this error supposed to occur because with the curl I am not sending my client certificate?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 14, 2018, 10:03pm UTC](https://discuss.elastic.co/t/debug-errors-between-filebeat-and-logstash/119885/2 "2018-03-14T22:03:58Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.