# Elasticsearch-setup-passwords connection issue

**URL:** <https://discuss.elastic.co/t/elasticsearch-setup-passwords-connection-issue/279254>\
**Category:** Elasticsearch\
**Tags:** elastic-stack-monitoring\
**Created:** [July 21, 2021, 10:39am UTC](https://discuss.elastic.co/t/elasticsearch-setup-passwords-connection-issue/279254 "2021-07-21T10:39:24Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![Aboli\_77](https://avatars.discourse-cdn.com/v4/letter/a/6de8d8/32.png) [@Aboli\_77](https://discuss.elastic.co/u/Aboli_77)\
**Post date:** [July 21, 2021, 10:39am UTC](https://discuss.elastic.co/t/elasticsearch-setup-passwords-connection-issue/279254/1 "2021-07-21T10:39:24Z")

</div>

Hello Team,

I tried to run the following command:  
./elasticsearch-setup-passwords auto -u "[https://XXXXXXX:9200](https://XXXXXXX:9200)"  
But got the following error:  
Connection failure to: [https://XXXXXXX:9200/\_xpack/security/\_authenticate?pretty](https://XXXXXXX:9200/_xpack/security/_authenticate?pretty) failed: Connection refused (Connection refused)

ERROR: Failed to connect to elasticsearch at [https://XXXXXXX:9200/\_xpack/security/\_authenticate?pretty](https://XXXXXXX:9200/_xpack/security/_authenticate?pretty). Is the URL correct and elasticsearch running?

I would appreciate any advice or hints, thank you in advance!

---

<div class="post-metadata">

**Author:** ![spinscale](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/spinscale/32/25011_2.png) [@spinscale](https://discuss.elastic.co/u/spinscale)\
**Post date:** [July 21, 2021, 2:04pm UTC](https://discuss.elastic.co/t/elasticsearch-setup-passwords-connection-issue/279254/2 "2021-07-21T14:04:24Z")

</div>

We can't tell if that endpoint is the correct one to reach, this is something that you set up. In general, you should be able to connect to that endpoint to your elasticsearch instance. What happens when you try reach it via `curl` or your browser? Does it work? I suppose you did setup TLS/https?

---

<div class="post-metadata">

**Author:** ![Aboli\_77](https://avatars.discourse-cdn.com/v4/letter/a/6de8d8/32.png) [@Aboli\_77](https://discuss.elastic.co/u/Aboli_77)\
**Post date:** [July 21, 2021, 2:22pm UTC](https://discuss.elastic.co/t/elasticsearch-setup-passwords-connection-issue/279254/3 "2021-07-21T14:22:51Z")

</div>

I suppose you did setup TLS/https? -------------\>Yes, we did. we are following: [Configuring SSL, TLS, and HTTPS to secure Elasticsearch, Kibana, Beats, and Logstash | Elastic Blog](https://www.elastic.co/blog/configuring-ssl-tls-and-https-to-secure-elasticsearch-kibana-beats-and-logstash) for setting SSL/TLS and we are blocked at [2-6-4] .

What happens when you try reach it via curl or your browser? Does it work? -----\> No it doesn't. It works when I hit URL without applying SSL/TLS.

---

<div class="post-metadata">

**Author:** ![spinscale](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/spinscale/32/25011_2.png) [@spinscale](https://discuss.elastic.co/u/spinscale)\
**Post date:** [July 21, 2021, 2:24pm UTC](https://discuss.elastic.co/t/elasticsearch-setup-passwords-connection-issue/279254/4 "2021-07-21T14:24:10Z")

</div>

> No it doesn't. It works when I hit URL without applying SSL/TLS.

I don't understand that. Can you explain?

---

<div class="post-metadata">

**Author:** ![Aboli\_77](https://avatars.discourse-cdn.com/v4/letter/a/6de8d8/32.png) [@Aboli\_77](https://discuss.elastic.co/u/Aboli_77)\
**Post date:** [July 21, 2021, 2:55pm UTC](https://discuss.elastic.co/t/elasticsearch-setup-passwords-connection-issue/279254/5 "2021-07-21T14:55:10Z")

</div>

When we hit URL before configuring SSL/TSL [http://XXXXXXX:9200](http://XXXXXXX:9200) then it gives output as follows:

{  
"name" : "pYwR4IF",  
"cluster\_name" : "elasticsearch",  
"cluster\_uuid" : "bR6a2IkVRmCWmqcjRL\_ABQ",  
"version" : {  
"number" : "6.8.6",  
"build\_flavor" : "default",  
"build\_type" : "tar",  
"build\_hash" : "56c6e48",  
"build\_date" : "2019-04-29T09:05:50.290371Z",  
"build\_snapshot" : false,  
"lucene\_version" : "7.7.0",  
"minimum\_wire\_compatibility\_version" : "5.6.0",  
"minimum\_index\_compatibility\_version" : "5.0.0"  
},  
"tagline" : "You Know, for Search"  
}

after configuring SSL/TSL by these steps [Configuring SSL, TLS, and HTTPS to secure Elasticsearch, Kibana, Beats, and Logstash | Elastic Blog](https://www.elastic.co/blog/configuring-ssl-tls-and-https-to-secure-elasticsearch-kibana-beats-and-logstash)  
the output will be:  
**[https://XXXXXXX:9200](https://XXXXXXX:9200)** refused to connect.

Try:

· Checking the connection

· Checking the proxy and the firewall

ERR\_CONNECTION\_REFUSED

---

<div class="post-metadata">

**Author:** ![TimV](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/timv/32/13162_2.png) [@TimV](https://discuss.elastic.co/u/TimV)\
**Post date:** [July 22, 2021, 4:26am UTC](https://discuss.elastic.co/t/elasticsearch-setup-passwords-connection-issue/279254/6 "2021-07-22T04:26:40Z")

</div>

It sounds like your node is failing to start. You need to [read the Elasticsearch logs](https://www.elastic.co/guide/en/elasticsearch/reference/current/logging.html) to find out why.

---

<div class="post-metadata">

**Author:** ![Aboli\_77](https://avatars.discourse-cdn.com/v4/letter/a/6de8d8/32.png) [@Aboli\_77](https://discuss.elastic.co/u/Aboli_77)\
**Post date:** [July 27, 2021, 11:46am UTC](https://discuss.elastic.co/t/elasticsearch-setup-passwords-connection-issue/279254/7 "2021-07-27T11:46:25Z")

</div>

There is nothing getting logged in elasticsearch log but nohup.error has below error:

Exception in thread "main" java.lang.NoClassDefFoundError: Could not initialize class sun.security.util.SignatureFileVerifier  
at java.util.jar.JarFile.initializeVerifier(JarFile.java:371)  
at java.util.jar.JarFile.ensureInitialization(JarFile.java:615)  
at java.util.jar.JavaUtilJarAccessImpl.ensureInitialization(JavaUtilJarAccessImpl.java:69)  
at sun.misc.URLClassPath$JarLoader$2.getManifest(URLClassPath.java:991)  
at java.net.URLClassLoader.defineClass(URLClassLoader.java:451)  
at java.net.URLClassLoader.access$100(URLClassLoader.java:74)  
at java.net.URLClassLoader$1.run(URLClassLoader.java:369)  
at java.net.URLClassLoader$1.run(URLClassLoader.java:363)  
at java.security.AccessController.doPrivileged(Native Method)  
at java.net.URLClassLoader.findClass(URLClassLoader.java:362)  
at java.lang.ClassLoader.loadClass(ClassLoader.java:418)  
at java.lang.ClassLoader.loadClass(ClassLoader.java:405)  
at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:355)  
at java.lang.ClassLoader.loadClass(ClassLoader.java:351)  
at sun.security.jca.ProviderConfig$2.run(ProviderConfig.java:215)  
at sun.security.jca.ProviderConfig$2.run(ProviderConfig.java:206)  
at java.security.AccessController.doPrivileged(Native Method)  
at sun.security.jca.ProviderConfig.doLoadProvider(ProviderConfig.java:206)  
at sun.security.jca.ProviderConfig.getProvider(ProviderConfig.java:187)  
at sun.security.jca.ProviderList.getProvider(ProviderList.java:233)  
at sun.security.jca.ProviderList$ServiceList.tryGet(ProviderList.java:434)  
at sun.security.jca.ProviderList$ServiceList.access$200(ProviderList.java:376)  
at sun.security.jca.ProviderList$ServiceList$1.hasNext(ProviderList.java:486)  
at javax.crypto.SecretKeyFactory.nextSpi(SecretKeyFactory.java:293)  
at javax.crypto.SecretKeyFactory.(SecretKeyFactory.java:121)  
at javax.crypto.SecretKeyFactory.getInstance(SecretKeyFactory.java:160)  
at org.elasticsearch.common.settings.KeyStoreWrapper.createCipher(KeyStoreWrapper.java:299)  
at org.elasticsearch.common.settings.KeyStoreWrapper.decrypt(KeyStoreWrapper.java:348)  
at org.elasticsearch.bootstrap.Bootstrap.loadSecureSettings(Bootstrap.java:241)  
at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:295)  
at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:159)  
at org.elasticsearch.bootstrap.Elasticsearch.execute(Elasticsearch.java:150)  
at org.elasticsearch.cli.EnvironmentAwareCommand.execute(EnvironmentAwareCommand.java:86)  
at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:124)  
at org.elasticsearch.cli.Command.main(Command.java:90)  
at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:116)  
at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:93)  
"nohup.error" 38L, 2746C

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 24, 2021, 11:46am UTC](https://discuss.elastic.co/t/elasticsearch-setup-passwords-connection-issue/279254/8 "2021-08-24T11:46:45Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
