# Exception when installing S3 plugin

**URL:** https://discuss.elastic.co/t/exception-when-installing-s3-plugin/130010
**Category:** Elasticsearch
**Created:** [April 30, 2018, 10:29am UTC](https://discuss.elastic.co/t/exception-when-installing-s3-plugin/130010 "2018-04-30T10:29:40Z")
**Posts on this page:** 6
**Page:** 1

<div class="post-metadata">

### Author: ![smlbiobot](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/smlbiobot/32/29622_2.png) [@smlbiobot](https://discuss.elastic.co/u/smlbiobot)
#### Post date: [April 30, 2018, 10:29am UTC](https://discuss.elastic.co/t/exception-when-installing-s3-plugin/130010/1 "2018-04-30T10:29:41Z")

</div>

I’ve received the following exception when trying to install the S3 plugin on one of the new nodes. I was able to install it on my older nodes and don’t recall running into this problem before.

- OS: Ubuntu 18.04 LTS
- JRE: openjdk-11-jre-headless
- ES: 6.2.2

```auto
sudo bin/elasticsearch-plugin install repository-s3
Exception in thread "main" javax.net.ssl.SSLException: java.lang.RuntimeException: Unexpected error: java.security.InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty
	at java.base/sun.security.ssl.Alerts.getSSLException(Alerts.java:214)
	at java.base/sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1974)
	at java.base/sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1926)
	at java.base/sun.security.ssl.SSLSocketImpl.handleException(SSLSocketImpl.java:1909)
	at java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1436)
	at java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1413)
	at java.base/sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:567)
	at java.base/sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:185)
	at java.base/sun.net.www.protocol.https.HttpsURLConnectionImpl.connect(HttpsURLConnectionImpl.java:163)
	at org.elasticsearch.plugins.InstallPluginCommand.urlExists(InstallPluginCommand.java:306)
	at org.elasticsearch.plugins.InstallPluginCommand.getElasticUrl(InstallPluginCommand.java:273)
	at org.elasticsearch.plugins.InstallPluginCommand.download(InstallPluginCommand.java:229)
	at org.elasticsearch.plugins.InstallPluginCommand.execute(InstallPluginCommand.java:221)
	at org.elasticsearch.plugins.InstallPluginCommand.execute(InstallPluginCommand.java:212)
	at org.elasticsearch.cli.EnvironmentAwareCommand.execute(EnvironmentAwareCommand.java:86)
	at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:124)
	at org.elasticsearch.cli.MultiCommand.execute(MultiCommand.java:75)
	at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:124)
	at org.elasticsearch.cli.Command.main(Command.java:90)
	at org.elasticsearch.plugins.PluginCli.main(PluginCli.java:48)
Caused by: java.lang.RuntimeException: Unexpected error: java.security.InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty
	at java.base/sun.security.validator.PKIXValidator.<init>(PKIXValidator.java:89)
	at java.base/sun.security.validator.Validator.getInstance(Validator.java:181)
	at java.base/sun.security.ssl.X509TrustManagerImpl.getValidator(X509TrustManagerImpl.java:330)
	at java.base/sun.security.ssl.X509TrustManagerImpl.checkTrustedInit(X509TrustManagerImpl.java:180)
	at java.base/sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:192)
	at java.base/sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:133)
	at java.base/sun.security.ssl.ClientHandshaker.checkServerCerts(ClientHandshaker.java:1947)
	at java.base/sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1777)
	at java.base/sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:264)
	at java.base/sun.security.ssl.Handshaker.processLoop(Handshaker.java:1098)
	at java.base/sun.security.ssl.Handshaker.processRecord(Handshaker.java:1026)
	at java.base/sun.security.ssl.SSLSocketImpl.processInputRecord(SSLSocketImpl.java:1137)
	at java.base/sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1074)
	at java.base/sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:973)
	at java.base/sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1402)
	at java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1429)
	... 15 more
Caused by: java.security.InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty
	at java.base/java.security.cert.PKIXParameters.setTrustAnchors(PKIXParameters.java:200)
	at java.base/java.security.cert.PKIXParameters.<init>(PKIXParameters.java:120)
	at java.base/java.security.cert.PKIXBuilderParameters.<init>(PKIXBuilderParameters.java:104)
	at java.base/sun.security.validator.PKIXValidator.<init>(PKIXValidator.java:86)
	... 30 more

```

---

<div class="post-metadata">

### Author: ![rjernst](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rjernst/32/6363_2.png) [@rjernst](https://discuss.elastic.co/u/rjernst)
#### Post date: [April 30, 2018, 3:37pm UTC](https://discuss.elastic.co/t/exception-when-installing-s3-plugin/130010/2 "2018-04-30T15:37:40Z")

</div>

This sounds like a broken java installation. I recommend you try purging the java package completely and reinstalling.

---

<div class="post-metadata">

### Author: ![smlbiobot](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/smlbiobot/32/29622_2.png) [@smlbiobot](https://discuss.elastic.co/u/smlbiobot)
#### Post date: [April 30, 2018, 3:51pm UTC](https://discuss.elastic.co/t/exception-when-installing-s3-plugin/130010/3 "2018-04-30T15:51:49Z")

</div>

I just tried to install it on the second node that I have added today, and it gives the same error. Which JRE do you recommend that I install?

---

<div class="post-metadata">

### Author: ![smlbiobot](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/smlbiobot/32/29622_2.png) [@smlbiobot](https://discuss.elastic.co/u/smlbiobot)
#### Post date: [April 30, 2018, 3:59pm UTC](https://discuss.elastic.co/t/exception-when-installing-s3-plugin/130010/4 "2018-04-30T15:59:10Z")

</div>

Just tried

```auto
sudo apt-get install default-jre

```

and tried installing the plugin again and am getting the same error.

Are you suggesting that I first run:

```auto
sudo apt-get purge openjdk-\* 

```

and then reinstall?

---

<div class="post-metadata">

### Author: ![smlbiobot](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/smlbiobot/32/29622_2.png) [@smlbiobot](https://discuss.elastic.co/u/smlbiobot)
#### Post date: [April 30, 2018, 4:29pm UTC](https://discuss.elastic.co/t/exception-when-installing-s3-plugin/130010/5 "2018-04-30T16:29:11Z")

</div>

Ok fixed. purged that JRE and installed Oracle JDK 10 and it is working fine now — thanks!

```auto
sudo add-apt-repository ppa:linuxuprising/java
sudo apt update
sudo apt install oracle-java10-installer

```

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [May 28, 2018, 4:29pm UTC](https://discuss.elastic.co/t/exception-when-installing-s3-plugin/130010/6 "2018-05-28T16:29:28Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
