# Elasticsearch Security plugin exception

**URL:** <https://discuss.elastic.co/t/elasticsearch-security-plugin-exception/212461>\
**Category:** Elasticsearch\
**Created:** [December 19, 2019, 9:37am UTC](https://discuss.elastic.co/t/elasticsearch-security-plugin-exception/212461 "2019-12-19T09:37:57Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![akr](https://avatars.discourse-cdn.com/v4/letter/a/edb3f5/32.png) [@akr](https://discuss.elastic.co/u/akr)\
**Post date:** [December 19, 2019, 9:37am UTC](https://discuss.elastic.co/t/elasticsearch-security-plugin-exception/212461/1 "2019-12-19T09:37:58Z")

</div>

I am getting error while working on ssl part of elasticsearch.  
stacktrace": ["org.elasticsearch.bootstrap.StartupException: java.lang.IllegalStateException: failed to load plugin class [org.elasticsearch.xpack.core.XPackPlugin]"  
.....  
"Caused by: java.lang.reflect.InvocationTargetException",  
.....  
"Caused by: org.elasticsearch.ElasticsearchSecurityException: failed to load SSL configuration [xpack.security.transport.ssl]",  
.....  
"Caused by: org.elasticsearch.ElasticsearchException: failed to initialize SSL TrustManager",  
......  
"Caused by: java.io.IOException: Is a directory",

I used docker-compose file

version: '2.2'

services:

elasticsearch:  
image: [docker.elastic.co/elasticsearch/elasticsearch:7.4.2](http://docker.elastic.co/elasticsearch/elasticsearch:7.4.2)  
container\_name: elasticsearch  
environment:  
- node.name=elasticsearch  
- discovery.seed\_hosts=elasticsearch  
- cluster.initial\_master\_nodes=elasticsearch  
- cluster.name=docker-cluster  
- bootstrap.memory\_lock=true  
- "ES\_JAVA\_OPTS=-Xms512m -Xmx512m"  
- xpack.security.enabled=true  
- xpack.security.transport.ssl.enabled=true  
- xpack.security.transport.ssl.verification\_mode=certificate  
- xpack.security.transport.ssl.keystore.path=elastic-certificates.p12  
- xpack.security.transport.ssl.truststore.path=elastic-certificates.p12

```
ulimits:
  memlock:
    soft: -1
    hard: -1
volumes:
  - ./elastic-stack-ca.p12:/usr/share/elasticsearch/config/elastic-stack-ca.p12
  - ./elastic-certificates.p12:/usr/share/elasticsearch/config/elastic-certificates.p12
  - esdata1:/usr/share/elasticsearch/data
ports:
  - 9200:9200

```

kibana:  
image: [docker.elastic.co/kibana/kibana:7.4.2](http://docker.elastic.co/kibana/kibana:7.4.2)  
container\_name: kibana  
environment:  
ELASTICSEARCH\_URL: "[https://elasticsearch:9200](https://elasticsearch:9200)"  
ELASTICSEARCH\_USERNAME: "kibana"  
ELASTICSEARCH\_PASSWORD: "kibana"  
ports:  
- 5601:5601  
depends\_on:  
- elasticsearch

volumes:  
esdata1:  
driver: local

Just run for elasticsearch with docker-compose up elasticsearch

I have used below command to generate the certificate  
bin/elasticsearch-certutil ca

bin/elasticsearch-certutil cert --ca elastic-stack-ca.p12

and just clicked enter for password.

I want to add SSL and Https security with username password for elasticsearch.  
Could you please help to find out the problem.

---

<div class="post-metadata">

**Author:** ![akr](https://avatars.discourse-cdn.com/v4/letter/a/edb3f5/32.png) [@akr](https://discuss.elastic.co/u/akr)\
**Post date:** [December 20, 2019, 12:24pm UTC](https://discuss.elastic.co/t/elasticsearch-security-plugin-exception/212461/3 "2019-12-20T12:24:00Z")

</div>

I have also tried with the configuration mentioned on the below link:  
[https://www.elastic.co/guide/en/elasticsearch/reference/7.5/configuring-tls-docker.html](https://www.elastic.co/guide/en/elasticsearch/reference/7.5/configuring-tls-docker.html)

But I am getting below error  
$ docker run --rm -v es\_certs:/certs --network=es\_default [docker.elastic.co/elasticsearch/elasticsearch:7.5.1](http://docker.elastic.co/elasticsearch/elasticsearch:7.5.1) curl --cacert /certs/ca/ca.crt -u elastic:PleaseChangeMe [https://es01:9200](https://es01:9200)  
% Total % Received % Xferd Average Speed Time Time Time Current  
Dload Upload Total Spent Left Speed  
0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0curl: (77) Problem with the SSL CA cert (path? access rights?)

Could you please help me solve it?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [January 17, 2020, 12:24pm UTC](https://discuss.elastic.co/t/elasticsearch-security-plugin-exception/212461/4 "2020-01-17T12:24:02Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.