# elasticsearch.ssl.verificationMode is not working in Kibana 8.3.2 **URL:** \ **Category:** Kibana\ **Tags:** elastic-stack-security\ **Created:** [February 7, 2023, 3:20am UTC](https://discuss.elastic.co/t/elasticsearch-ssl-verificationmode-is-not-working-in-kibana-8-3-2/324847 "2023-02-07T03:20:21Z")\ **Posts on this page:** 9\ **Page:** 1
**Author:** ![Leonardo\_Henrique](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leonardo_henrique/32/79658_2.png) [@Leonardo\_Henrique](https://discuss.elastic.co/u/Leonardo_Henrique)\ **Post date:** [February 7, 2023, 3:20am UTC](https://discuss.elastic.co/t/elasticsearch-ssl-verificationmode-is-not-working-in-kibana-8-3-2/324847/1 "2023-02-07T03:20:21Z")
Hello everyone. I set the ssl configuration for my cluster using the `elasticsearch-certutil`, but my Kibana is unable to reach [https://epr.elastic.co](https://epr.elastic.co) so I can not install any integration since it depends on loading from this repo. In the logs I can see `Error connecting to package registry: request to ` `https://epr.elastic.co/search?experimental=true&kibana.version=8.3.2` ` failed, reason: self signed certificate in the chain` I tried to disable this verification using `elasticsearch.ssl.verificationMode` as none but it still give me the same result as before. What can I do to avoid this error and to be able to install fleet/integrations? ---
**Author:** ![Ayush\_Mathur](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ayush_mathur/32/77134_2.png) [@Ayush\_Mathur](https://discuss.elastic.co/u/Ayush_Mathur)\ **Post date:** [February 7, 2023, 7:57am UTC](https://discuss.elastic.co/t/elasticsearch-ssl-verificationmode-is-not-working-in-kibana-8-3-2/324847/2 "2023-02-07T07:57:22Z")
Hello @Leonardo_Henrique , the setting `elasticsearch.ssl.verification_mode` only set the verification mode to be used for authorization between Kibana and Elasticsearch. The error you are receiving is while connecting to EPR (Elastic Package Registry) which is essentially required to check and download the latest packages for Fleet. BY any chance are you running your cluster in air-gapped environment ? ---
**Author:** ![Leonardo\_Henrique](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leonardo_henrique/32/79658_2.png) [@Leonardo\_Henrique](https://discuss.elastic.co/u/Leonardo_Henrique)\ **Post date:** [February 7, 2023, 10:31am UTC](https://discuss.elastic.co/t/elasticsearch-ssl-verificationmode-is-not-working-in-kibana-8-3-2/324847/3 "2023-02-07T10:31:38Z")
Not for now, I had to set that up by connecting with the external EPR. I do not know where to go, I tested several things here and nothing worked. ---
**Author:** ![Ayush\_Mathur](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ayush_mathur/32/77134_2.png) [@Ayush\_Mathur](https://discuss.elastic.co/u/Ayush_Mathur)\ **Post date:** [February 7, 2023, 11:23am UTC](https://discuss.elastic.co/t/elasticsearch-ssl-verificationmode-is-not-working-in-kibana-8-3-2/324847/4 "2023-02-07T11:23:27Z")
Ok, then most likely your firewall or proxy might be blocking your requests. There is another way to work on this, by setting up the EPS locally (or within your environment). Please refer: [Air-gapped environments | Fleet and Elastic Agent Guide [8.6] | Elastic](https://www.elastic.co/guide/en/fleet/current/air-gapped.html) ---
**Author:** ![Leonardo\_Henrique](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leonardo_henrique/32/79658_2.png) [@Leonardo\_Henrique](https://discuss.elastic.co/u/Leonardo_Henrique)\ **Post date:** [February 7, 2023, 11:27am UTC](https://discuss.elastic.co/t/elasticsearch-ssl-verificationmode-is-not-working-in-kibana-8-3-2/324847/5 "2023-02-07T11:27:46Z")
I will give a chance to that, what implications can I have if I choose to host the EPR by myself? ---
**Author:** ![Ayush\_Mathur](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ayush_mathur/32/77134_2.png) [@Ayush\_Mathur](https://discuss.elastic.co/u/Ayush_Mathur)\ **Post date:** [February 7, 2023, 11:33am UTC](https://discuss.elastic.co/t/elasticsearch-ssl-verificationmode-is-not-working-in-kibana-8-3-2/324847/6 "2023-02-07T11:33:03Z")
The only constraint would be to keep your registry up-to-date with latest packages yourself/ using some automation, since those will be available only in Elastic EPR. ---
**Author:** ![Leonardo\_Henrique](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leonardo_henrique/32/79658_2.png) [@Leonardo\_Henrique](https://discuss.elastic.co/u/Leonardo_Henrique)\ **Post date:** [February 7, 2023, 11:37am UTC](https://discuss.elastic.co/t/elasticsearch-ssl-verificationmode-is-not-working-in-kibana-8-3-2/324847/7 "2023-02-07T11:37:01Z")
I see, a question regarding that. Since I am using the ELK in 8.3.2, I will have to touch in the EPR any time in the future to update that since I do not change my ELK version? ---
**Author:** ![Ayush\_Mathur](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ayush_mathur/32/77134_2.png) [@Ayush\_Mathur](https://discuss.elastic.co/u/Ayush_Mathur)\ **Post date:** [February 7, 2023, 11:40am UTC](https://discuss.elastic.co/t/elasticsearch-ssl-verificationmode-is-not-working-in-kibana-8-3-2/324847/8 "2023-02-07T11:40:59Z")
You can use the EPR version corresponding to the stack version you have. The upgrades are essential since with every release more features, functionalities and bug fixes are released, so this should always be part of Continuous Improvement. For your particular version, you can try using 8.3.3 version of EPR: [Air-gapped environments | Fleet and Elastic Agent Guide [8.3] | Elastic](https://www.elastic.co/guide/en/fleet/8.3/air-gapped.html) ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [March 7, 2023, 11:41am UTC](https://discuss.elastic.co/t/elasticsearch-ssl-verificationmode-is-not-working-in-kibana-8-3-2/324847/9 "2023-03-07T11:41:52Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.