# Finding Difficulties with SSL Certificate verification with Lumberjack,Logstash version 1.5.4

**URL:** <https://discuss.elastic.co/t/finding-difficulties-with-ssl-certificate-verification-with-lumberjack-logstash-version-1-5-4/28219>\
**Category:** Logstash\
**Created:** [August 28, 2015, 4:59am UTC](https://discuss.elastic.co/t/finding-difficulties-with-ssl-certificate-verification-with-lumberjack-logstash-version-1-5-4/28219 "2015-08-28T04:59:53Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![KarthikaAr](https://avatars.discourse-cdn.com/v4/letter/k/958977/32.png) [@KarthikaAr](https://discuss.elastic.co/u/KarthikaAr)\
**Post date:** [August 28, 2015, 4:59am UTC](https://discuss.elastic.co/t/finding-difficulties-with-ssl-certificate-verification-with-lumberjack-logstash-version-1-5-4/28219/1 "2015-08-28T04:59:53Z")

</div>

Hi Greetings!!  
I am trying to connect one Log stash agent to another(Using Logstash 1.5.4).  
java version:

java version "1.8.0\_51"  
Java(TM) SE Runtime Environment (build 1.8.0\_51-b16)  
Java HotSpot(TM) 64-Bit Server VM (build 25.51-b03, mixed mode)  
I have generated .csr with CN=hostname in Server Logstash end, Later Self signed it and generated certificate from my Organization Internal Certification Dept.

I have copied the Certificate to the Client End Logstash also.

# My Configs will be something look like below in both ends. Client Config

input{  
jdbc{  
jdbc\_driver\_library =\> "/pathto/opt/sqljdbc\_4.2/enu/sqljdbc4.jar"  
jdbc\_driver\_class =\> "com.microsoft.sqlserver.jdbc.SQLServerDriver"  
jdbc\_connection\_string =\> "jdbc:sqlserver://XXXXXX.bnymellon.net:14331;databaseName==XXDB"  
jdbc\_user =\> "XXXX"  
jdbc\_password =\> "YYYY"  
schedule =\> "\*/15 \* \* \* \*"  
statement =\> "Select \* from view1"  
}

}

output{  
lumberjack{  
codec =\> "json\_lines"  
hosts =\> [SERVER.HOSTNAME.NET](http://SERVER.HOSTNAME.NET)  
port =\> 8888  
ssl\_certificate =\> "/PATHTO/server.cer"  
}  
}

# Server Config

input{

lumberjack{

```
    port => 8888
ssl_certificate => "/PATHTO/server.cer"
ssl_key => "/PATHTO/logstash_server.key"

```

}  
}

output{

stdout{

codec=\> "json\_lines"  
}  
}

I am getting the below error when i tried connecting:

All hosts unavailable, sleeping {:hosts=\>["xx.xxx.xxx.xxx"], :e=\>#\<OpenSSL::SSL::SSLError: **certificate verify failed** \>, :backtrace=\>["org/jruby/ext/openssl/SSLSocket.java:190:in `connect'", "/users/home/xbbkfzn/opt/logstash/logstash-1.5.4/vendor/bundle/jruby/1.9/gems/jls-lumberjack-0.0.24/lib/lumberjack/client.rb:87:in`connection\_start'", "/users/home/xbbkfzn/opt/logstash/logstash-1.5.4/vendor/bundle/jruby/1.9/gems/jls-lumberjack-0.0.24/lib/lumberjack/client.rb:70:in `initialize'", "/users/home/xbbkfzn/opt/logstash/logstash-1.5.4/vendor/bundle/jruby/1.9/gems/jls-lumberjack-0.0.24/lib/lumberjack/client.rb:33:in`connect'", "/users/home/xbbkfzn/opt/logstash/logstash-1.5.4/vendor/bundle/jruby/1.9/gems/jls-lumberjack-0.0.24/lib/lumberjack/client.rb:22:in `initialize'", "/users/home/xbbkfzn/opt/logstash/logstash-1.5.4/vendor/bundle/jruby/1.9/gems/logstash-output-lumberjack-1.0.2/lib/logstash/outputs/lumberjack.rb:92:in`connect'", "/users/home/xbbkfzn/opt/logstash/logstash-1.5.4/vendor/bundle/jruby/1.9/gems/logstash-output-lumberjack-1.0.2/lib/logstash/outputs/lumberjack.rb:51:in `register'", "org/jruby/RubyArray.java:1613:in`each'", "/users/home/xbbkfzn/opt/logstash/logstash-1.5.4/vendor/bundle/jruby/1.9/gems/logstash-core-1.5.4-java/lib/logstash/pipeline.rb:164:in `start_outputs'", "/users/home/xbbkfzn/opt/logstash/logstash-1.5.4/vendor/bundle/jruby/1.9/gems/logstash-core-1.5.4-java/lib/logstash/pipeline.rb:83:in`run'", "/users/home/xbbkfzn/opt/logstash/logstash-1.5.4/vendor/bundle/jruby/1.9/gems/logstash-core-1.5.4-java/lib/logstash/agent.rb:155:in `execute'", "/users/home/xbbkfzn/opt/logstash/logstash-1.5.4/vendor/bundle/jruby/1.9/gems/logstash-core-1.5.4-java/lib/logstash/runner.rb:90:in`run'", "org/jruby/RubyProc.java:271:in `call'", "/users/home/xbbkfzn/opt/logstash/logstash-1.5.4/vendor/bundle/jruby/1.9/gems/logstash-core-1.5.4-java/lib/logstash/runner.rb:95:in`run'", "org/jruby/RubyProc.java:271:in `call'", "/users/home/xbbkfzn/opt/logstash/logstash-1.5.4/vendor/bundle/jruby/1.9/gems/stud-0.0.21/lib/stud/task.rb:12:in`initialize'"], :level=\>:error, :file=\>"logstash/outputs/lumberjack.rb", :line=\>"95", :method=\>"connect"}

This is the same issue i faced with 1.5.3 version also.I don't know where I am missing,Is it with the Certificate I am using or any other config problem ?.I guess I am something with SSL certificate .Please help me with above exception ?

Please advise.Thanks in advance

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [August 29, 2015, 10:38pm UTC](https://discuss.elastic.co/t/finding-difficulties-with-ssl-certificate-verification-with-lumberjack-logstash-version-1-5-4/28219/2 "2015-08-29T22:38:39Z")

</div>

> [@KarthikaAr](#):
>
> All hosts unavailable

Looks like the two hosts cannot talk to each other.  
Can you telnet from the client to the server on port 8888 when LS is running?

---

<div class="post-metadata">

**Author:** ![utilitynerd](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/utilitynerd/32/22944_2.png) [@utilitynerd](https://discuss.elastic.co/u/utilitynerd)\
**Post date:** [August 31, 2015, 11:24pm UTC](https://discuss.elastic.co/t/finding-difficulties-with-ssl-certificate-verification-with-lumberjack-logstash-version-1-5-4/28219/3 "2015-08-31T23:24:23Z")

</div>

I'm having a similar issue, but get a slightly more detailed error message:

:message=\>"All hosts unavailable, sleeping", :hosts=\>["xxx.xxx.xxx.xxx"],  
:e=\>OpenSSL::SSL::SSLError: certificate verify failed\>

What is strange in my case, is logstash-fowarder set to use the same CA certificate works just fine. I also used openssl to verify that the ca certificate I'm using does verify the certificate using by the lumberjack-input.

I know the hosts can communicate with each other, since logstash-forwarder works, just not logstash with the lumberjack-output plugin.

---

<div class="post-metadata">

**Author:** ![KarthikaAr](https://avatars.discourse-cdn.com/v4/letter/k/958977/32.png) [@KarthikaAr](https://discuss.elastic.co/u/KarthikaAr)\
**Post date:** [September 15, 2015, 12:45pm UTC](https://discuss.elastic.co/t/finding-difficulties-with-ssl-certificate-verification-with-lumberjack-logstash-version-1-5-4/28219/4 "2015-09-15T12:45:49Z")

</div>

Yes I am successful in Telnet.

Is thera anything to do with version of jruby or java

I am getting Exception as

message=\>"All hosts unavailable, sleeping", :hosts=\>["xxx.xxx.xxx.xxx"],  
:e=\>OpenSSL::SSL::SSLError: certificate verify failed\>

Is there any particular port I should make available ,or any free port will do.PLease assist.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 5:29am UTC](https://discuss.elastic.co/t/finding-difficulties-with-ssl-certificate-verification-with-lumberjack-logstash-version-1-5-4/28219/5 "2017-07-06T05:29:06Z")

</div>


