ES cloud - CA certificates

[leonid_fayngold]

Hi,
Our team is moving from ES on prem to ES on cloud.
I have created ES instance in Azure and I want to send some requests to my Elasticsearch endpoint.
I have tried to send add user request however the request is rejected on cert issue.
I am sending my requests using java API/curl from a remote computer in my organization , I have downloaded the CA cert from cloud elastic management tool and
added this cert to my SSL context, however my request is rejected with the following Exception:

javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

I am wondering where can I get valid CA cert to add into my keystore and connect to the endpoint ? can you advise ?

[stephenb (Stephen Brown)]

Have you tried to simply do a curl request to make sure

The Elastic Cloud CAs are publicly signed so you should not need the CA locally

Can you try

curl -v -u elastic https://escloudendpoint

You don't need a port

Make sure you get the right endpoint.

Let's see if that works first then work on the next problem

But if you still want them
Go To Elastic Cloud
Go to your Deployment
Go to Security and you can download the CA for that Deployment