# Esrally-elastic mutual TLS

**URL:** <https://discuss.elastic.co/t/esrally-elastic-mutual-tls/143515>\
**Category:** Elasticsearch\
**Tags:** rally\
**Created:** [August 8, 2018, 12:37pm UTC](https://discuss.elastic.co/t/esrally-elastic-mutual-tls/143515 "2018-08-08T12:37:47Z")\
**Posts on this page:** 1\
**Showing post:** 7

<div class="post-metadata">

**Author:** ![fara](https://avatars.discourse-cdn.com/v4/letter/f/ea5d25/32.png) [@fara](https://discuss.elastic.co/u/fara)\
**Post date:** [August 13, 2018, 10:32am UTC](https://discuss.elastic.co/t/esrally-elastic-mutual-tls/143515/7 "2018-08-13T10:32:43Z")

</div>

> [@fara](#):
>
> urllib3.exceptions.SSLError: [SSL: SSLV3\_ALERT\_BAD\_CERTIFICATE] sslv3 alert bad certificate (\_ssl.c:645)

@dliappis  
I don't have any component before ES. It is just configured with Mutual TLS.  
I have done a tcpdump and I see that Elastic service is requiring the client certificate to rally but it is not sending them to ES.  
When I run:

```auto
curl --cacert /tmp/cacert.pem --cert /tmp/client_cert.pem --key /tmp/client_key.pem https://10.10.10.10:31504

```

I see the error mentioned in the first post.

Ramón.

---

_[View the full topic](https://discuss.elastic.co/t/esrally-elastic-mutual-tls/143515)._