# ES - xpack & https

**URL:** <https://discuss.elastic.co/t/es-xpack-https/202581>\
**Category:** Elasticsearch\
**Created:** [October 7, 2019, 7:02pm UTC](https://discuss.elastic.co/t/es-xpack-https/202581 "2019-10-07T19:02:08Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![NewmazN24](https://avatars.discourse-cdn.com/v4/letter/n/b77776/32.png) [@NewmazN24](https://discuss.elastic.co/u/NewmazN24)\
**Post date:** [October 7, 2019, 7:02pm UTC](https://discuss.elastic.co/t/es-xpack-https/202581/1 "2019-10-07T19:02:08Z")

</div>

Hello folks,

Once again I am turning to you.

My SSL/TLS works. However when I add my HTTPS, it fails. I have added my certificate password with the command from the link below. I use the same cert for my TLS & HTTPS.

Error from journalctl or status doesn't say much except that elasticsearch is failing.

Any insight ?

Tried

- Removing password from keystore and re-adding them.

**Config**

```
xpack.security.enabled: true
xpack.security.transport.ssl.enabled: true
xpack.security.http.ssl.enabled: true

xpack.security.http.ssl.keystore.path: certs/master1.p12
xpack.security.http.ssl.truststore.path: certs/master1.p12

xpack.security.transport.ssl.keystore.path: certs/master1.p12
xpack.security.transport.ssl.truststore.path: certs/master1.p12

```

[https://www.elastic.co/guide/en/elasticsearch/reference/current/configuring-tls.html](https://www.elastic.co/guide/en/elasticsearch/reference/current/configuring-tls.html)

---

<div class="post-metadata">

**Author:** ![NewmazN24](https://avatars.discourse-cdn.com/v4/letter/n/b77776/32.png) [@NewmazN24](https://discuss.elastic.co/u/NewmazN24)\
**Post date:** [October 7, 2019, 7:30pm UTC](https://discuss.elastic.co/t/es-xpack-https/202581/2 "2019-10-07T19:30:44Z")

</div>

So... for some reason I cannot explain, the certificate password got removed. It was an empty string. I had to change all my secure keys to match up.

**How did I found out ?**

1. Exported the certificate on a desktop.
2. Tried to install the certificate with the password entered at creation.
3. It didn't work so I tried an empty string and it was successful.

If that can be any help to someone out there.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 4, 2019, 7:30pm UTC](https://discuss.elastic.co/t/es-xpack-https/202581/3 "2019-11-04T19:30:47Z")

</div>

Closed on November 4, 2019, 7:30pm UTC

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.