Fatal Error after creating ssl definitions

(Sharon Sasporta) #1 
Dec 27 16:37:24 eaasrt systemd: kibana.service: main process exited, code=exited, status=1/FAILURE
Dec 27 16:37:24 eaasrt systemd: Unit kibana.service entered failed state.
Dec 27 16:37:24 eaasrt systemd: kibana.service holdoff time over, scheduling restart.
Dec 27 16:37:24 eaasrt systemd: Stopping Kibana...
Dec 27 16:37:24 eaasrt systemd: Starting Kibana...
Dec 27 16:37:24 eaasrt systemd: Started Kibana.
**Dec 27 16:37:26 eaasrt kibana: FATAL Error: error:0906A068:PEM routines:PEM_do_header:bad password read**
Dec 27 16:37:26 eaasrt kibana: at Error (native)
Dec 27 16:37:26 eaasrt kibana: at Object.createSecureContext (_tls_common.js:90:19)
Dec 27 16:37:26 eaasrt kibana: at Server (_tls_wrap.js:751:25)
Dec 27 16:37:26 eaasrt kibana: at Server (https.js:26:14)
Dec 27 16:37:26 eaasrt kibana: at new Server (/usr/share/kibana/node_modules/httpolyglot/index.js:20:18)
Dec 27 16:37:26 eaasrt kibana: at Object.exports.createServer (/usr/share/kibana/node_modules/httpolyglot/index.js:92:10)
Dec 27 16:37:26 eaasrt kibana: at KbnServer.exports.default (/usr/share/kibana/src/server/http/setup_connection.js:55:40)
Dec 27 16:37:26 eaasrt kibana: at KbnServer.<anonymous> (/usr/share/kibana/src/server/kbn_server.js:107:20)
Dec 27 16:37:26 eaasrt kibana: at undefined.next (native)
Dec 27 16:37:26 eaasrt kibana: at step (/usr/share/kibana/src/server/kbn_server.js:7:273)
Dec 27 16:37:26 eaasrt kibana: at /usr/share/kibana/src/server/kbn_server.js:7:443

Any Idea ?

Thanks
Sharon.

(Court Ewing) #2

It looks like the key you're using requires a passphrase, but Kibana does not support key passphrases right now. There's a PR open at the moment that should introduce that support for the first time, though: https://github.com/elastic/kibana/pull/8855

(Sharon Sasporta) #3

Thanks.

What is the workaround for that?

(Sharon Sasporta) #4

Different error now. Any Idea? Who can assist here?
I am defining all these, as I understand it is must to be able to generate a report.

Dec 28 12:14:06 eaasrt kibana: at step (/usr/share/kibana/src/server/kbn_server.js:7:273)
Dec 28 12:14:06 eaasrt kibana: at /usr/share/kibana/src/server/kbn_server.js:7:443
Dec 28 12:14:06 eaasrt kibana: at KbnServer.<anonymous> (/usr/share/kibana/src/server/kbn_server.js:7:99)
Dec 28 12:14:06 eaasrt kibana: at KbnServer.<anonymous> (/usr/share/kibana/src/server/http/index.js:53:19)
Dec 28 12:14:06 eaasrt kibana: at undefined.next (native)
Dec 28 12:14:06 eaasrt kibana: at step (/usr/share/kibana/src/server/http/index.js:5:273)
Dec 28 12:14:06 eaasrt kibana: at process._tickCallback (internal/process/next_tick.js:103:7)
Dec 28 12:14:06 eaasrt systemd: kibana.service: main process exited, code=exited, status=1/FAILURE
Dec 28 12:14:06 eaasrt systemd: Unit kibana.service entered failed state.
Dec 28 12:14:06 eaasrt systemd: kibana.service holdoff time over, scheduling restart.
Dec 28 12:14:06 eaasrt systemd: Stopping Kibana...
Dec 28 12:14:06 eaasrt systemd: Starting Kibana...
Dec 28 12:14:06 eaasrt systemd: Started Kibana.
**Dec 28 12:14:07 eaasrt kibana: FATAL Error: error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch**
Dec 28 12:14:07 eaasrt kibana: at Error (native)
Dec 28 12:14:07 eaasrt kibana: at Object.createSecureContext (_tls_common.js:90:19)
Dec 28 12:14:07 eaasrt kibana: at Server (_tls_wrap.js:751:25)
Dec 28 12:14:07 eaasrt kibana: at Server (https.js:26:14)
Dec 28 12:14:07 eaasrt kibana: at new Server (/usr/share/kibana/node_modules/httpolyglot/index.js:20:18)
Dec 28 12:14:07 eaasrt kibana: at Object.exports.createServer (/usr/share/kibana/node_modules/httpolyglot/index.js:92:10)
Dec 28 12:14:07 eaasrt kibana: at KbnServer.exports.default (/usr/share/kibana/src/server/http/setup_connection.js:55:40)
Dec 28 12:14:07 eaasrt kibana: at KbnServer.<anonymous> (/usr/share/kibana/src/server/kbn_server.js:107:20)

Thanks
Sharon.

(Court Ewing) #5

There is no workaround for this other than using a key without a passphrase.

That new error appears to be the result of using a mismatched certificate and key files. I'd recommend repeating your cert generation steps to make sure you have a working pair of the certificate and key files. Kibana doesn't itself do any wrangling of SSL certificates, so this is something you'll need to do on your end and then configure Kibana to use the correct files.

(Sharon Sasporta) #6

Hi,

What is the path of config directory of elasticsearch?

Thanks
Sharon.

(Sharon Sasporta) #7

found!!!

(system) #8

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.