Error after enabling SSL on logstash 7.3.0

[cowensel (Peter Cowen)]

We are currently configuring SSL on logstash but after adding the SSL config to the elasticsearch output an error is being generated which I cannot determine what is generating the error.

We have a security policy that stipulates that passwords cannot be stored on our servers in plain text including environment variables. I have created the logstash keystore with no password to comply with our policy. The output I am using is:

output {
elasticsearch {
hosts => ["https://localhost:9200"]
index => "logstash-%{+YYYY.MM.dd}"
template_overwrite => true
ilm_enabled => false
ssl => true
ssl_certificate_verification => true
cacert => 'path\to\logstash.cer'
keystore => 'path\to\logstash.keystore'
keystore_password => ''
user => "${ES_USER}"
password => "${ES_PWD}"
}
}
The error generated is:

[ERROR][logstash.javapipeline ] /outputs/elasticsearch/C:/Users/peterc/Documents/ELK/ELK6.0.0/logstash-7.3.0/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-10.1.0-java/lib/logstash/outputs/elasticsearch/http_client.rb)", "C_3a_.Users.peterc.Documents.ELK.ELK6_dot_0_dot_0.logstash_minus_7_dot_3_dot_0.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_output_minus_elasticsearch_minus_10_dot_1_dot_0_minus_java.lib.logstash.outputs.elasticsearch.http_client.build_pool(C:/Users/peterc/Documents/ELK/ELK6.0.0/logstash-7.3.0/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-10.1.0-java/lib/logstash/outputs/elasticsearch/http_client.rb:286)", "C_3a_.Users.peterc.Documents.ELK.ELK6_dot_0_dot_0.logstash_minus_7_dot_3_dot_0.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_output_minus_elasticsearch_minus_10_dot_1_dot_0_minus_java.lib.logstash.outputs.elasticsearch.http_client.RUBY$method$build_pool$0$VARARGS(C_3a_/Users/peterc/Documents/ELK/ELK6_dot_0_dot_0/logstash_minus_7_dot_3_dot_0/vendor/bundle/jruby/$2_dot_5_dot_0/gems/logstash_minus_output_minus_elasticsearch_minus_10_dot_1_dot_0_minus_java/lib/logstash/outputs/elasticsearch/C:/Users/peterc/Documents/ELK/ELK6.0.0/logstash-7.3.0/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-10.1.0-java/lib/logstash/outputs/elasticsearch/http_client.rb)", "C_3a_.Users.peterc.Documents.ELK.ELK6_dot_0_dot_0.logstash_minus_7_dot_3_dot_0.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_output_minus_elasticsearch_minus_10_dot_1_dot_0_minus_java.lib.logstash.outputs.elasticsearch.http_client.initialize(C:/Users/peterc/Documents/ELK/ELK6.0.0/logstash-7.3.0/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-10.1.0-java/lib/logstash/outputs/elasticsearch/http_client.rb:64)", "org.jruby.RubyClass.newInstance(org/jruby/RubyClass.java:915)", "org.jruby.RubyClass$INVOKER$i$newInstance.call(org/jruby/RubyClass$INVOKER$i$newInstance.gen)", "C_3a_.Users.peterc.Documents.ELK.ELK6_dot_0_dot_0.logstash_minus_7_dot_3_dot_0.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_output_minus_elasticsearch_minus_10_dot_1_dot_0_minus_java.lib.logstash.outputs.elasticsearch.http_client_builder.create_http_client(C:/Users/peterc/Documents/ELK/ELK6.0.0/logstash-7.3.0/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-10.1.0-java/lib/logstash/outputs/elasticsearch/http_client_builder.rb:103)", "C_3a_.Users.peterc.Documents.ELK.ELK6_dot_0_dot_0.logstash_minus_7_dot_3_dot_0.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_output_minus_elasticsearch_minus_10_dot_1_dot_0_minus_java.lib.logstash.outputs.elasticsearch.http_client_builder.RUBY$method$create_http_client$0$VARARGS(C_3a_/Users/peterc/Documents/ELK/ELK6_dot_0_dot_0/logstash_minus_7_dot_3_dot_0/vendor/bundle/jruby/$2_dot_5_dot_0/gems/logstash_minus_output_minus_elasticsearch_minus_10_dot_1_dot_0_minus_java/lib/logstash/outputs/elasticsearch/C:/Users/peterc/Documents/ELK/ELK6.0.0/logstash-7.3.0/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-10.1.0-java/lib/logstash/outputs/elasticsearch/http_client_builder.rb)", "C_3a_.Users.peterc.Documents.ELK.ELK6_dot_0_dot_0.logstash_minus_7_dot_3_dot_0.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_output_minus_elasticsearch_minus_10_dot_1_dot_0_minus_java.lib.logstash.outputs.elasticsearch.http_client_builder.build(C:/Users/peterc/Documents/ELK/ELK6.0.0/logstash-7.3.0/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-10.1.0-java/lib/logstash/outputs/elasticsearch/http_client_builder.rb:99)", "C_3a_.Users.peterc.Documents.ELK.ELK6_dot_0_dot_0.logstash_minus_7_dot_3_dot_0.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_output_minus_elasticsearch_minus_10_dot_1_dot_0_minus_java.lib.logstash.outputs.elasticsearch.http_client_builder.RUBY$method$build$0$VARARGS(C_3a_/Users/peterc/Documents/ELK/ELK6_dot_0_dot_0/logstash_minus_7_dot_3_dot_0/vendor/bundle/jruby/$2_dot_5_dot_0/gems/logstash_minus_output_minus_elasticsearch_minus_10_dot_1_dot_0_minus_java/lib/logstash/outputs/elasticsearch/C:/Users/peterc/Documents/ELK/ELK6.0.0/logstash-7.3.0/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-10.1.0-java/lib/logstash/outputs/elasticsearch/http_client_builder.rb)", "C_3a_.Users.peterc.Documents.ELK.ELK6_dot_0_dot_0.logstash_minus_7_dot_3_dot_0.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_output_minus_elasticsearch_minus_10_dot_1_dot_0_minus_java.lib.logstash.outputs.elasticsearch.build_client(C:/Users/peterc/Documents/ELK/ELK6.0.0/logstash-7.3.0/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-10.1.0-java/lib/logstash/outputs/elasticsearch.rb:238)", "C_3a_.Users.peterc.Documents.ELK.ELK6_dot_0_dot_0.logstash_minus_7_dot_3_dot_0.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_output_minus_elasticsearch_minus_10_dot_1_dot_0_minus_java.lib.logstash.outputs.elasticsearch.RUBY$method$build_client$0$VARARGS(C_3a_/Users/peterc/Documents/ELK/ELK6_dot_0_dot_0/logstash_minus_7_dot_3_dot_0/vendor/bundle/jruby/

[cowensel (Peter Cowen)]

error continued

$2_dot_5_dot_0/gems/logstash_minus_output_minus_elasticsearch_minus_10_dot_1_dot_0_minus_java/lib/logstash/outputs/C:/Users/peterc/Documents/ELK/ELK6.0.0/logstash-7.3.0/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-10.1.0-java/lib/logstash/outputs/elasticsearch.rb)", "C_3a_.Users.peterc.Documents.ELK.ELK6_dot_0_dot_0.logstash_minus_7_dot_3_dot_0.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_output_minus_elasticsearch_minus_10_dot_1_dot_0_minus_java.lib.logstash.outputs.elasticsearch.common.register(C:/Users/peterc/Documents/ELK/ELK6.0.0/logstash-7.3.0/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-10.1.0-java/lib/logstash/outputs/elasticsearch/common.rb:25)", "org.jruby.RubyClass.finvoke(org/jruby/RubyClass.java:548)", "org.jruby.RubyBasicObject.callMethod(org/jruby/RubyBasicObject.java:354)", "org.logstash.config.ir.compiler.OutputStrategyExt$SimpleAbstractOutputStrategyExt.reg(org/logstash/config/ir/compiler/OutputStrategyExt.java:246)", "org.logstash.config.ir.compiler.OutputStrategyExt$AbstractOutputStrategyExt.register(org/logstash/config/ir/compiler/OutputStrategyExt.java:106)", "org.logstash.config.ir.compiler.OutputDelegatorExt.doRegister(org/logstash/config/ir/compiler/OutputDelegatorExt.java:91)", "org.logstash.config.ir.compiler.AbstractOutputDelegatorExt.register(org/logstash/config/ir/compiler/AbstractOutputDelegatorExt.java:48)", "org.logstash.config.ir.compiler.AbstractOutputDelegatorExt$INVOKER$i$0$0$register.call(org/logstash/config/ir/compiler/AbstractOutputDelegatorExt$INVOKER$i$0$0$register.gen)", "C_3a_.Users.peterc.Documents.ELK.ELK6_dot_0_dot_0.logstash_minus_7_dot_3_dot_0.logstash_minus_core.lib.logstash.java_pipeline.register_plugins(C:/Users/peterc/Documents/ELK/ELK6.0.0/logstash-7.3.0/logstash-core/lib/logstash/java_pipeline.rb:192)", "org.jruby.RubyArray.each(org/jruby/RubyArray.java:1792)", "org.jruby.RubyArray$INVOKER$i$0$0$each.call(org/jruby/RubyArray$INVOKER$i$0$0$each.gen)", "C_3a_.Users.peterc.Documents.ELK.ELK6_dot_0_dot_0.logstash_minus_7_dot_3_dot_0.logstash_minus_core.lib.logstash.java_pipeline.register_plugins(C:/Users/peterc/Documents/ELK/ELK6.0.0/logstash-7.3.0/logstash-core/lib/logstash/java_pipeline.rb:191)", "C_3a_.Users.peterc.Documents.ELK.ELK6_dot_0_dot_0.logstash_minus_7_dot_3_dot_0.logstash_minus_core.lib.logstash.java_pipeline.RUBY$method$register_plugins$0$VARARGS(C_3a_/Users/peterc/Documents/ELK/ELK6_dot_0_dot_0/logstash_minus_7_dot_3_dot_0/logstash_minus_core/lib/logstash/C:/Users/peterc/Documents/ELK/ELK6.0.0/logstash-7.3.0/logstash-core/lib/logstash/java_pipeline.rb)", "C_3a_.Users.peterc.Documents.ELK.ELK6_dot_0_dot_0.logstash_minus_7_dot_3_dot_0.logstash_minus_core.lib.logstash.java_pipeline.maybe_setup_out_plugins(C:/Users/peterc/Documents/ELK/ELK6.0.0/logstash-7.3.0/logstash-core/lib/logstash/java_pipeline.rb:462)", "C_3a_.Users.peterc.Documents.ELK.ELK6_dot_0_dot_0.logstash_minus_7_dot_3_dot_0.logstash_minus_core.lib.logstash.java_pipeline.RUBY$method$maybe_setup_out_plugins$0$VARARGS(C_3a_/Users/peterc/Documents/ELK/ELK6_dot_0_dot_0/logstash_minus_7_dot_3_dot_0/logstash_minus_core/lib/logstash/C:/Users/peterc/Documents/ELK/ELK6.0.0/logstash-7.3.0/logstash-core/lib/logstash/java_pipeline.rb)", "C_3a_.Users.peterc.Documents.ELK.ELK6_dot_0_dot_0.logstash_minus_7_dot_3_dot_0.logstash_minus_core.lib.logstash.java_pipeline.start_workers(C:/Users/peterc/Documents/ELK/ELK6.0.0/logstash-7.3.0/logstash-core/lib/logstash/java_pipeline.rb:204)", "C_3a_.Users.peterc.Documents.ELK.ELK6_dot_0_dot_0.logstash_minus_7_dot_3_dot_0.logstash_minus_core.lib.logstash.java_pipeline.RUBY$method$start_workers$0$VARARGS(C_3a_/Users/peterc/Documents/ELK/ELK6_dot_0_dot_0/logstash_minus_7_dot_3_dot_0/logstash_minus_core/lib/logstash/C:/Users/peterc/Documents/ELK/ELK6.0.0/logstash-7.3.0/logstash-core/lib/logstash/java_pipeline.rb)", "C_3a_.Users.peterc.Documents.ELK.ELK6_dot_0_dot_0.logstash_minus_7_dot_3_dot_0.logstash_minus_core.lib.logstash.java_pipeline.run(C:/Users/peterc/Documents/ELK/ELK6.0.0/logstash-7.3.0/logstash-core/lib/logstash/java_pipeline.rb:146)", "C_3a_.Users.peterc.Documents.ELK.ELK6_dot_0_dot_0.logstash_minus_7_dot_3_dot_0.logstash_minus_core.lib.logstash.java_pipeline.RUBY$method$run$0$VARARGS(C_3a_/Users/peterc/Documents/ELK/ELK6_dot_0_dot_0/logstash_minus_7_dot_3_dot_0/logstash_minus_core/lib/logstash/C:/Users/peterc/Documents/ELK/ELK6.0.0/logstash-7.3.0/logstash-core/lib/logstash/java_pipeline.rb)", "C_3a_.Users.peterc.Documents.ELK.ELK6_dot_0_dot_0.logstash_minus_7_dot_3_dot_0.logstash_minus_core.lib.logstash.java_pipeline.start(C:/Users/peterc/Documents/ELK/ELK6.0.0/logstash-7.3.0/logstash-core/lib/logstash/java_pipeline.rb:105)", "org.jruby.RubyProc.call(org/jruby/RubyProc.java:295)", "org.jruby.RubyProc.call(org/jruby/RubyProc.java:274)", "org.jruby.RubyProc.call(org/jruby/RubyProc.java:270)", "java.lang.Thread.run(java/lang/Thread.java:834)"], :thread=>"#<Thread:0x61f5583d run>"}
[2019-09-18T14:36:59,214][ERROR][logstash.agent ] Failed to execute action {:id=>:main, :action_type=>LogStash::ConvergeResult::FailedAction, :message=>"Could not execute action: PipelineAction::Create, action_result: false", :backtrace=>nil}

Any assistance you be grand or if you know of a better way of enabling SSL without the requirement of a plain text password being added.