# Elasticsearch self signed certificate **URL:** \ **Category:** Elasticsearch\ **Created:** [February 27, 2020, 9:00am UTC](https://discuss.elastic.co/t/elasticsearch-self-signed-certificate/221181 "2020-02-27T09:00:23Z")\ **Posts on this page:** 2\ **Page:** 1
**Author:** ![HadarPeeran](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/hadarpeeran/32/46926_2.png) [@HadarPeeran](https://discuss.elastic.co/u/HadarPeeran)\ **Post date:** [February 27, 2020, 9:00am UTC](https://discuss.elastic.co/t/elasticsearch-self-signed-certificate/221181/1 "2020-02-27T09:00:24Z")
Elasticsearch version 7.5.2 I followed instructions of blog [Configuring SSL, TLS, and HTTPS to secure Elasticsearch, Kibana, Beats, and Logstash | Elastic Blog](https://www.elastic.co/blog/configuring-ssl-tls-and-https-to-secure-elasticsearch-kibana-beats-and-logstash) created self-signed certificate by command: **elasticsearch-certutil cert ca --pem --in** D:/ELK/elasticsearch-7.5.2/config/certs\_dns/ instance.yaml -- **out** D:/ELK/elasticsearch-7.5.2/config/certs\_dns/certs.zip instances: - name: 'devops-idit-vm1' dns: ['devops-idit-vm1.x.int'] - name: 'devops-idit-vm2' dns: ['devops-idit-vm2.x.int'] devops-idit-vm1.x.int is for elasitnode1 , Kibana, Logstash devops-idit-vm2.x.int is for elasitnode2 cluster.initial\_master\_nodes: devops-idit-vm1 The ELK stack started successfully but I am getting endless warning message In devops-idit-vm1 elasticsearch log is > [2020-02-27T10:56:53,044][WARN][o.e.h.AbstractHttpServerTransport] [devops-idit-vm1] caught exception while handling client http traffic, closing connection Netty4HttpChannel{localAddress=0.0.0.0/0.0.0.0:9200, remoteAddress=/10.245.129.200:52697} > io.netty.handler.codec.DecoderException: javax.net.ssl.SSLException: Received fatal alert: bad\_certificate > at io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:473) ~[netty-codec-4.1.43.Final.jar:4.1.43.Final] > at io.netty.handler.codec.ByteToMessageDecoder.channelInputClosed(ByteToMessageDecoder.java:406) ~[netty-codec-4.1.43.Final.jar:4.1.43.Final] > at io.netty.handler.codec.ByteToMessageDecoder.channelInputClosed(ByteToMessageDecoder.java:373) ~[netty-codec-4.1.43.Final.jar:4.1.43.Final] > at io.netty.handler.codec.ByteToMessageDecoder.channelInactive(ByteToMessageDecoder.java:356) ~[netty-codec-4.1.43.Final.jar:4.1.43.Final] > at io.netty.handler.ssl.SslHandler.channelInactive(SslHandler.java:1078) ~[netty-handler-4.1.43.Final.jar:4.1.43.Final] > at io.netty.channel.AbstractChannelHandlerContext.invokeChannelInactive(AbstractChannelHandlerContext.java:257) [netty-transport-4.1.43.Final.jar:4.1.43.Final] > at io.netty.channel.AbstractChannelHandlerContext.invokeChannelInactive(AbstractChannelHandlerContext.java:243) [netty-transport-4.1.43.Final.jar:4.1.43.Final] > at io.netty.channel.AbstractChannelHandlerContext.fireChannelInactive(AbstractChannelHandlerContext.java:236) [netty-transport-4.1.43.Final.jar:4.1.43.Final] > at io.netty.channel.DefaultChannelPipeline$HeadContext.channelInactive(DefaultChannelPipeline.java:1417) [netty-transport-4.1.43.Final.jar:4.1.43.Final] > at io.netty.channel.AbstractChannelHandlerContext.invokeChannelInactive(AbstractChannelHandlerContext.java:257) [netty-transport-4.1.43.Final.jar:4.1.43.Final] > at io.netty.channel.AbstractChannelHandlerContext.invokeChannelInactive(AbstractChannelHandlerContext.java:243) [netty-transport-4.1.43.Final.jar:4.1.43.Final] > at io.netty.channel.DefaultChannelPipeline.fireChannelInactive(DefaultChannelPipeline.java:913) [netty-transport-4.1.43.Final.jar:4.1.43.Final] > at io.netty.channel.AbstractChannel$AbstractUnsafe$8.run(AbstractChannel.java:819) [netty-transport-4.1.43.Final.jar:4.1.43.Final] > at io.netty.util.concurrent.AbstractEventExecutor.safeExecute(AbstractEventExecutor.java:163) [netty-common-4.1.43.Final.jar:4.1.43.Final] > at io.netty.util.concurrent.SingleThreadEventExecutor.runAllTasks(SingleThreadEventExecutor.java:510) [netty-common-4.1.43.Final.jar:4.1.43.Final] > at io.netty.channel.nio.NioEventLoop.run(NioEventLoop.java:518) [netty-transport-4.1.43.Final.jar:4.1.43.Final] > at io.netty.util.concurrent.SingleThreadEventExecutor$6.run(SingleThreadEventExecutor.java:1050) [netty-common-4.1.43.Final.jar:4.1.43.Final] > at io.netty.util.internal.ThreadExecutorMap$2.run(ThreadExecutorMap.java:74) [netty-common-4.1.43.Final.jar:4.1.43.Final] > at java.lang.Thread.run(Thread.java:748) [?:1.8.0\_202] > Caused by: javax.net.ssl.SSLException: Received fatal alert: bad\_certificate > at sun.security.ssl.Alerts.getSSLException(Alerts.java:208) ~[?:?] > at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1647) ~[?:?] > at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1615) ~[?:?] > at sun.security.ssl.SSLEngineImpl.recvAlert(SSLEngineImpl.java:1781) ~[?:?] > at sun.security.ssl.SSLEngineImpl.readRecord(SSLEngineImpl.java:1070) ~[?:?] > at sun.security.ssl.SSLEngineImpl.readNetRecord(SSLEngineImpl.java:896) ~[?:?] > at sun.security.ssl.SSLEngineImpl.unwrap(SSLEngineImpl.java:766) ~[?:?] > at javax.net.ssl.SSLEngine.unwrap(SSLEngine.java:624) ~[?:1.8.0\_202] > at io.netty.handler.ssl.SslHandler$SslEngineType$3.unwrap(SslHandler.java:280) ~[netty-handler-4.1.43.Final.jar:4.1.43.Final] > at io.netty.handler.ssl.SslHandler.unwrap(SslHandler.java:1332) ~[netty-handler-4.1.43.Final.jar:4.1.43.Final] > at io.netty.handler.ssl.SslHandler.decodeJdkCompatible(SslHandler.java:1227) ~[netty-handler-4.1.43.Final.jar:4.1.43.Final] > at io.netty.handler.ssl.SslHandler.decode(SslHandler.java:1274) ~[netty-handler-4.1.43.Final.jar:4.1.43.Final] > at io.netty.handler.codec.ByteToMessageDecoder.decodeRemovalReentryProtection(ByteToMessageDecoder.java:503) ~[netty-codec-4.1.43.Final.jar:4.1.43.Final] > at io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:442) ~[netty-codec-4.1.43.Final.jar:4.1.43.Final] > ... 18 more In devops-idit-vm2 elasticsearch log is > [2020-02-27T11:02:10,235][WARN][o.e.x.s.t.n.SecurityNetty4HttpServerTransport] [devops-idit-vm2] received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=0.0.0.0/0.0.0.0:9200, remoteAddress=/10.245.131.134:51944} > [2020-02-27T11:02:20,245][WARN][o.e.x.s.t.n.SecurityNetty4HttpServerTransport] [devops-idit-vm2] received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=0.0.0.0/0.0.0.0:9200, remoteAddress=/10.245.131.134:51953} > [2020-02-27T11:02:30,249][WARN][o.e.x.s.t.n.SecurityNetty4HttpServerTransport] [devops-idit-vm2] received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=0.0.0.0/0.0.0.0:9200, remoteAddress=/10.245.131.134:51960} > [2020-02-27T11:02:40,256][WARN][o.e.x.s.t.n.SecurityNetty4HttpServerTransport] [devops-idit-vm2] received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=0.0.0.0/0.0.0.0:9200, remoteAddress=/10.245.131.134:51967} > [2020-02-27T11:02:50,264][WARN][o.e.x.s.t.n.SecurityNetty4HttpServerTransport] [devops-idit-vm2] received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=0.0.0.0/0.0.0.0:9200, remoteAddress=/10.245.131.134:51978} > [2020-02-27T11:03:00,276][WARN][o.e.x.s.t.n.SecurityNetty4HttpServerTransport] [devops-idit-vm2] received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=0.0.0.0/0.0.0.0:9200, remoteAddress=/10.245.131.134:51989} > [2020-02-27T11:03:10,280][WARN][o.e.x.s.t.n.SecurityNetty4HttpServerTransport] [devops-idit-vm2] received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=0.0.0.0/0.0.0.0:9200, remoteAddress=/10.245.131.134:51998} > [2020-02-27T11:03:20,287][WARN][o.e.x.s.t.n.SecurityNetty4HttpServerTransport] [devops-idit-vm2] received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=0.0.0.0/0.0.0.0:9200, remoteAddress=/10.245.131.134:52010} > [2020-02-27T11:03:30,292][WARN][o.e.x.s.t.n.SecurityNetty4HttpServerTransport] [devops-idit-vm2] received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=0.0.0.0/0.0.0.0:9200, remoteAddress=/10.245.131.134:52018} > [2020-02-27T11:03:40,300][WARN][o.e.x.s.t.n.SecurityNetty4HttpServerTransport] [devops-idit-vm2] received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=0.0.0.0/0.0.0.0:9200, remoteAddress=/10.245.131.134:52025} ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [March 26, 2020, 9:00am UTC](https://discuss.elastic.co/t/elasticsearch-self-signed-certificate/221181/2 "2020-03-26T09:00:28Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.