Error generating a custom certificate and private key for Fleet Server

Elastic Stack Elasticsearch
1

Hi Elastic community

I am generating my certificates to my Fleet Server

Step1
./bin/elasticsearch-certutil ca --pem

i moved my CA.cert & ca.key to /path/to/ca

Step2:

./bin/elasticsearch-certutil cert
--name FleetSrv
--ca-cert /path/to/ca/ca.crt
--ca-key /path/to/ca/ca.key
--dns ABC.DOMAIN.COM
--ip 192.0.1.20
--pem

Error

Exception in thread "main" java.nio.file.NoSuchFileException: /path/to/ca/ca.crt
        at java.base/sun.nio.fs.UnixException.translateToIOException(UnixExcepti                                                                                                             on.java:92)
        at java.base/sun.nio.fs.UnixException.rethrowAsIOException(UnixException                                                                                                             .java:106)
        at java.base/sun.nio.fs.UnixException.rethrowAsIOException(UnixException                                                                                                             .java:111)
        at java.base/sun.nio.fs.UnixFileSystemProvider.newByteChannel(UnixFileSy                                                                                                             stemProvider.java:218)
        at java.base/java.nio.file.Files.newByteChannel(Files.java:380)
        at java.base/java.nio.file.Files.newByteChannel(Files.java:432)
        at java.base/java.nio.file.spi.FileSystemProvider.newInputStream(FileSys                                                                                                             temProvider.java:422)
        at java.base/java.nio.file.Files.newInputStream(Files.java:160)
        at org.elasticsearch.common.ssl.PemUtils.readCertificates(PemUtils.java:                                                                                                             689)
        at org.elasticsearch.xpack.core.ssl.CertParsingUtils.readX509Certificate                                                                                                             (CertParsingUtils.java:53)
        at org.elasticsearch.xpack.security.cli.CertificateTool$CertificateComma                                                                                                             nd.loadPemCA(CertificateTool.java:386)
        at org.elasticsearch.xpack.security.cli.CertificateTool$CertificateComma                                                                                                             nd.getCAInfo(CertificateTool.java:349)
        at org.elasticsearch.xpack.security.cli.CertificateTool$GenerateCertific                                                                                                             ateCommand.getCAInfo(CertificateTool.java:759)
        at org.elasticsearch.xpack.security.cli.CertificateTool$GenerateCertific                                                                                                             ateCommand.execute(CertificateTool.java:701)
        at org.elasticsearch.common.cli.EnvironmentAwareCommand.execute(Environm                                                                                                             entAwareCommand.java:54)
        at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:8                                                                                                             5)
        at org.elasticsearch.cli.MultiCommand.execute(MultiCommand.java:94)
        at org.elasticsearch.xpack.security.cli.CertificateTool.execute(Certific                                                                                                             ateTool.java:160)
        at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:8                                                                                                             5)
        at org.elasticsearch.cli.Command.main(Command.java:50)
        at org.elasticsearch.launcher.CliToolLauncher.main(CliToolLauncher.java:

I was reading this link Configure SSL/TLS for self-managed Fleet Servers | Fleet and Elastic Agent Guide [8.7] | Elastic and i did only step 1

./bin/elasticsearch-certutil ca --pem

PLease help

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.