# Elasticsearch version 6.8.6 oss unable to start **URL:** \ **Category:** Elasticsearch\ **Created:** [January 13, 2020, 11:37pm UTC](https://discuss.elastic.co/t/elasticsearch-version-6-8-6-oss-unable-to-start/214918 "2020-01-13T23:37:06Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![mrnguuyen](https://avatars.discourse-cdn.com/v4/letter/m/7cd45c/32.png) [@mrnguuyen](https://discuss.elastic.co/u/mrnguuyen)\ **Post date:** [January 13, 2020, 11:37pm UTC](https://discuss.elastic.co/t/elasticsearch-version-6-8-6-oss-unable-to-start/214918/1 "2020-01-13T23:37:06Z")
Hi all, I am trying to do a fresh install of elasticsearch-oss-6.8.6 with OpenJDK version 1.8.0\_181. An elasticsearch-oss-6.5 was able to successfully install before but I am receiving errors related to the keystore and trust manager. There were no issues related to the trust manager and keystore before. Here is the exception from elasticsearch.log: > ``` > [2020-01-13T19:11:26,760][INFO][o.e.p.PluginsService] [xSBU6-2] no plugins loaded > [2020-01-13T19:11:29,780][ERROR][o.e.b.Bootstrap] [xSBU6-2] Exception > org.elasticsearch.common.ssl.SslConfigException: failed to initialize a TrustManager for the system keystore > at org.elasticsearch.common.ssl.DefaultJdkTrustConfig.createTrustManager(DefaultJdkTrustConfig.java:70) ~[?:?] > at org.elasticsearch.common.ssl.SslConfiguration.createSslContext(SslConfiguration.java:109) ~[?:?] > at org.elasticsearch.index.reindex.ReindexSslConfig.reload(ReindexSslConfig.java:145) ~[?:?] > at org.elasticsearch.index.reindex.ReindexSslConfig.(ReindexSslConfig.java:115) ~[?:?] > at org.elasticsearch.index.reindex.ReindexPlugin.createComponents(ReindexPlugin.java:88) ~[?:?] > at org.elasticsearch.node.Node.lambda$new$11(Node.java:472) ~[elasticsearch-6.8.6.jar:6.8.6] > at java.util.stream.ReferencePipeline$7$1.accept(ReferencePipeline.java:267) ~[?:1.8.0_181] > at java.util.ArrayList$ArrayListSpliterator.forEachRemaining(ArrayList.java:1382) ~[?:1.8.0_181] > at java.util.stream.AbstractPipeline.copyInto(AbstractPipeline.java:481) ~[?:1.8.0_181] > at java.util.stream.AbstractPipeline.wrapAndCopyInto(AbstractPipeline.java:471) ~[?:1.8.0_181] > at java.util.stream.ReduceOps$ReduceOp.evaluateSequential(ReduceOps.java:708) ~[?:1.8.0_181] > at java.util.stream.AbstractPipeline.evaluate(AbstractPipeline.java:234) ~[?:1.8.0_181] > at java.util.stream.ReferencePipeline.collect(ReferencePipeline.java:499) ~[?:1.8.0_181] > at org.elasticsearch.node.Node.(Node.java:475) ~[elasticsearch-6.8.6.jar:6.8.6] > at org.elasticsearch.node.Node.(Node.java:266) ~[elasticsearch-6.8.6.jar:6.8.6] > at org.elasticsearch.bootstrap.Bootstrap$5.(Bootstrap.java:212) ~[elasticsearch-6.8.6.jar:6.8.6] > at org.elasticsearch.bootstrap.Bootstrap.setup(Bootstrap.java:212) ~[elasticsearch-6.8.6.jar:6.8.6] > at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:333) [elasticsearch-6.8.6.jar:6.8.6] > at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:159) [elasticsearch-6.8.6.jar:6.8.6] > at org.elasticsearch.bootstrap.Elasticsearch.execute(Elasticsearch.java:150) [elasticsearch-6.8.6.jar:6.8.6] > at org.elasticsearch.cli.EnvironmentAwareCommand.execute(EnvironmentAwareCommand.java:86) [elasticsearch-6.8.6.jar:6.8.6] > at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:124) [elasticsearch-cli-6.8.6.jar:6.8.6] > at org.elasticsearch.cli.Command.main(Command.java:90) [elasticsearch-cli-6.8.6.jar:6.8.6] > at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:116) [elasticsearch-6.8.6.jar:6.8.6] > at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:93) [elasticsearch-6.8.6.jar:6.8.6] > Caused by: java.security.KeyStoreException: problem accessing trust storejava.io.IOException: Invalid keystore format > at sun.security.ssl.TrustManagerFactoryImpl.engineInit(TrustManagerFactoryImpl.java:74) ~[?:?] > at javax.net.ssl.TrustManagerFactory.init(TrustManagerFactory.java:250) ~[?:1.8.0_181] > at org.elasticsearch.common.ssl.KeyStoreUtil.createTrustManager(KeyStoreUtil.java:151) ~[?:?] > at org.elasticsearch.common.ssl.DefaultJdkTrustConfig.createTrustManager(DefaultJdkTrustConfig.java:68) ~[?:?] > ... 24 more > > ``` Not sure if this will help but this is from "systemctl status elasticsearch": > [red dot] elasticsearch.service - Elasticsearch > Loaded: loaded (/usr/lib/systemd/system/elasticsearch.service; disabled; vendor preset: disabled) > Active: failed (Result: exit-code) since Tue 2020-01-14 08:34:19 UTC; 8s ago > Docs: [http://www.elastic.co](http://www.elastic.co) > Process: 5553 ExecStart=/usr/share/elasticsearch/bin/elasticsearch -p ${PID\_DIR}/elasticsearch.pid --quiet (code=exited, status=1/FAILURE) > Main PID: 5553 (code=exited, status=1/FAILURE) > > Jan 14 08:34:13 thetemplate systemd[1]: Started Elasticsearch. > Jan 14 08:34:13 thetemplate systemd[1]: Starting Elasticsearch... > Jan 14 08:34:19 thetemplate systemd[1]: elasticsearch.service: main process exited, code=exited, status=1/FAILURE > Jan 14 08:34:19 thetemplate systemd[1]: Unit elasticsearch.service entered failed state. > Jan 14 08:34:19 thetemplate systemd[1]: elasticsearch.service failed. ---
**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\ **Post date:** [January 14, 2020, 6:24am UTC](https://discuss.elastic.co/t/elasticsearch-version-6-8-6-oss-unable-to-start/214918/2 "2020-01-14T06:24:27Z")
The OSS distribution of Elasticsearch does not include support for security so I am not sure this is expected to work. With the default distribution security is now available as part of the basic license though. Did you have any security plugin installed on Elasticsearch-oss 6.5? ---
**Author:** ![jw-ovgd](https://avatars.discourse-cdn.com/v4/letter/j/ecb155/32.png) [@jw-ovgd](https://discuss.elastic.co/u/jw-ovgd)\ **Post date:** [January 14, 2020, 7:03pm UTC](https://discuss.elastic.co/t/elasticsearch-version-6-8-6-oss-unable-to-start/214918/3 "2020-01-14T19:03:59Z")
Hi Christian I'll be driving this for Brandon today. Can you elaborate on why this is not expected to work? We think this should work just fine. We are using the OSS 6.8.6 RPM downloaded from here: [https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-oss-6.8.6.rpm](https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-oss-6.8.6.rpm) Previously, we were using the OSS 6.5.4 RPM downloaded from here: [https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-oss-6.5.4.rpm](https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-oss-6.5.4.rpm) We are not trying to perform any kind of upgrade on Elasticsearch. We are taking our base SW product and installing the OSS 6.8.6 RPM on top of it which worked just fine with OSS 6.5.4 We have never used Xpack or any other security plugin for Elasticsearch. We see this keystore exception thrown everytime Elasticsearch attempts to start. The only things I have found online relating to this are: > > [@Oracle vs Open JDK version](https://discuss.elastic.co/t/oracle-vs-open-jdk-version/144553/2): > > you can also try with openjdk, see [https://www.elastic.co/support/matrix#matrix\_jvm](https://www.elastic.co/support/matrix#matrix_jvm) note the minimum recommended versions > [@SSL KeyStoreException on X-Pack 5.1.1 installation (RHEL)](https://discuss.elastic.co/t/ssl-keystoreexception-on-x-pack-5-1-1-installation-rhel/70611): > > I have a development cluster made up of 3 nodes. I installed Elasticsearch 5.1.1 on all 3, and Kibana 5.1.1 on just the first one. Installing X-Pack for ES and Kibana on node 1 worked fine and the services started back up again. I managed to hit the login screen and successfully authenticated with the default credentials. However, the ES service fails to start on the other 2 nodes. I'm seeing: org.elasticsearch.bootstrap.StartupException: ElasticsearchException[Failed to load plugin class [org… Which seem to suggest it is an OracleJDK vs OpenJDK problem. As Brandon described we are using OpenJDK and have no way currently of using OracleJDK, but the support matrix states that OpenJDK is supported for this version of Elasticsearch. ---
**Author:** ![mrnguuyen](https://avatars.discourse-cdn.com/v4/letter/m/7cd45c/32.png) [@mrnguuyen](https://discuss.elastic.co/u/mrnguuyen)\ **Post date:** [January 15, 2020, 5:19pm UTC](https://discuss.elastic.co/t/elasticsearch-version-6-8-6-oss-unable-to-start/214918/4 "2020-01-15T17:19:12Z")
I mentioned it at the top of the post but at the moment, we are currently using OpenJDK version 1.8.0\_181 and it seems like this is the supported version in [https://www.elastic.co/support/matrix#matrix\_jvm](https://www.elastic.co/support/matrix#matrix_jvm). Is this link outdated or is this link specifically for non-oss versions? ---
**Author:** ![mrnguuyen](https://avatars.discourse-cdn.com/v4/letter/m/7cd45c/32.png) [@mrnguuyen](https://discuss.elastic.co/u/mrnguuyen)\ **Post date:** [January 15, 2020, 11:12pm UTC](https://discuss.elastic.co/t/elasticsearch-version-6-8-6-oss-unable-to-start/214918/5 "2020-01-15T23:12:24Z")
This issue never came up with version 6.5.4 but I believe this was mainly because there wasn't a /libs/ssl-config directory and for some reason why, the OSS version is calling this library when there isn't any security or xpack configurations. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [February 12, 2020, 11:12pm UTC](https://discuss.elastic.co/t/elasticsearch-version-6-8-6-oss-unable-to-start/214918/6 "2020-02-12T23:12:29Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.