Does not match the certificate subject provided by the peer

cyberzlo · February 25, 2021, 2:19pm

Host name 'localhost' does not match the certificate subject provided by the peer (CN=elasticsearch)

How can I deal with it? Can I just verify certificate? I don't want hardcode any IP etc.

In /etc/logstash/logstash.yml I have xpack.monitoring.elasticsearch.ssl.verification_mode: certificate but this not help with such error. Similar option is in Kibana and it works fine...

Maybe should I change some name in ES config to fix it?

I would like to keep ssl_certificate_verification set to true because of security reasons.

Badger · February 25, 2021, 4:47pm

Are you getting that from an input? A filter? An output? Which one and how is it configured?

cyberzlo · February 25, 2021, 10:37pm

It is from logstash which report to elasticsearch, currently only on localhost, but will need soon also second from other PC.

Badger · February 25, 2021, 10:57pm

Read through this thread.

system · March 25, 2021, 10:58pm

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.