stephenb
(Stephen Brown)
December 31, 2023, 3:55am
2
Per the docs Use the
--url
option with hostname or IP that is listed as the SAN in that first line error message like
--url https://192.168.1.105:9200
zeynepyz:
.....
the certificate has subject alternative names
[IP:fe80:0:0:0:b9bc:f274:5403:3ea9,DNS:localhost,IP:192.168.1.104,IP:0:0:0:0:0:0:0:1,IP:127.0.0.1,IP:192.168.1.105,IP:fe80:0:0:0:75d5:a12b:1d99:f2f,DNS:zeymira]; the certificate is issued by [CN=Elasticsearch security auto-configuration HTTP CA];
the certificate is signed by (subject [CN=Elasticsearch security auto-configuration HTTP CA] fingerprint [2ca0f51b78a95e3ee9d16cc005646b149fe564e8] {trusted issuer}) which is self-issued; the [CN=Elasticsearch security auto-configuration HTTP CA] certificate is trusted in this ssl context ([xpack.security.http.ssl (with trust configuration: Composite-Trust{JDK-trusted-certs,StoreTrustConfig{path=certs/http.p12, password=<non-empty>, type=PKCS12, algorithm=PKIX}})])
java.security.cert.CertificateException:
No subject alternative names matching
IP address 192.168.1.7 found