# Getting java.nio.file.NoSuchFileException while starting ES

**URL:** <https://discuss.elastic.co/t/getting-java-nio-file-nosuchfileexception-while-starting-es/236165>\
**Category:** Elasticsearch\
**Tags:** elastic-stack-security\
**Created:** [June 8, 2020, 11:53am UTC](https://discuss.elastic.co/t/getting-java-nio-file-nosuchfileexception-while-starting-es/236165 "2020-06-08T11:53:02Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![bijender\_kr](https://avatars.discourse-cdn.com/v4/letter/b/9de053/32.png) [@bijender\_kr](https://discuss.elastic.co/u/bijender_kr)\
**Post date:** [June 8, 2020, 11:53am UTC](https://discuss.elastic.co/t/getting-java-nio-file-nosuchfileexception-while-starting-es/236165/1 "2020-06-08T11:53:02Z")

</div>

Hello,

I am getting below error while starting ES service after enabling the TLS. I have performed below steps:

1. created a CA certificate.  
`bin/elasticsearch-certutil ca/`

2. Added the certificate password into keystore.

`bin/elasticsearch-keystore add xpack.security.transport.ssl.keystore.secure_password`

```auto
bin/elasticsearch-keystore add xpack.security.transport.ssl.truststore.secure_password`

```

Here is the elasticsearch.yml file:

```auto
xpack.security.enabled: true
xpack.security.transport.ssl.enabled: true
xpack.security.transport.ssl.verification_mode: certificate
xpack.security.transport.ssl.keystore.path: elastic-certificates.p12
xpack.security.transport.ssl.truststore.path: elastic-certificates.p12

```

Error log :

```auto
Caused by: java.nio.file.NoSuchFileException: /etc/elasticsearch/elastic-certificates.p12
        at sun.nio.fs.UnixException.translateToIOException(UnixException.java:86) ~[?:?]
        at sun.nio.fs.UnixException.rethrowAsIOException(UnixException.java:102) ~[?:?]
        at sun.nio.fs.UnixException.rethrowAsIOException(UnixException.java:107) ~[?:?]
        at sun.nio.fs.UnixFileSystemProvider.newByteChannel(UnixFileSystemProvider.java:214) ~[?:?]
        at java.nio.file.Files.newByteChannel(Files.java:361) ~[?:1.8.0_252]
        at java.nio.file.Files.newByteChannel(Files.java:407) ~[?:1.8.0_252]
        at java.nio.file.spi.FileSystemProvider.newInputStream(FileSystemProvider.java:384) ~[?:1.8.0_252]
        at java.nio.file.Files.newInputStream(Files.java:152) ~[?:1.8.0_252]
        at org.elasticsearch.xpack.core.ssl.TrustConfig.getStore(TrustConfig.java:95) ~[?:?]
        at org.elasticsearch.xpack.core.ssl.StoreTrustConfig.createTrustManager(StoreTrustConfig.java:65) ~[?:?]
        at org.elasticsearch.xpack.core.ssl.SSLService.createSslContext(SSLService.java:427) ~[?:?]
        at java.util.HashMap.computeIfAbsent(HashMap.java:1127) ~[?:1.8.0_252]
        at org.elasticsearch.xpack.core.ssl.SSLService.loadConfiguration(SSLService.java:521) ~[?:?]
        at org.elasticsearch.xpack.core.ssl.SSLService.loadSSLConfigurations(SSLService.java:501) ~[?:?]
        at org.elasticsearch.xpack.core.ssl.SSLService.<init>(SSLService.java:142) ~[?:?]
        at org.elasticsearch.xpack.core.ssl.SSLService.<init>(SSLService.java:130) ~[?:?]
        at org.elasticsearch.xpack.core.XPackPlugin.createComponents(XPackPlugin.java:260) ~[?:?]
        at org.elasticsearch.node.Node.lambda$new$11(Node.java:478) ~[elasticsearch-7.7.0.jar:7.7.0]
        at java.util.stream.ReferencePipeline$7$1.accept(ReferencePipeline.java:269) ~[?:1.8.0_252]
        at java.util.ArrayList$ArrayListSpliterator.forEachRemaining(ArrayList.java:1382) ~[?:1.8.0_252]
        at java.util.stream.AbstractPipeline.copyInto(AbstractPipeline.java:482) ~[?:1.8.0_252]
        at java.util.stream.AbstractPipeline.wrapAndCopyInto(AbstractPipeline.java:472) ~[?:1.8.0_252]
        at java.util.stream.ReduceOps$ReduceOp.evaluateSequential(ReduceOps.java:708) ~[?:1.8.0_252]
        at java.util.stream.AbstractPipeline.evaluate(AbstractPipeline.java:234) ~[?:1.8.0_252]
        at java.util.stream.ReferencePipeline.collect(ReferencePipeline.java:566) ~[?:1.8.0_252]
        at org.elasticsearch.node.Node.<init>(Node.java:481) ~[elasticsearch-7.7.0.jar:7.7.0]
        at org.elasticsearch.node.Node.<init>(Node.java:264) ~[elasticsearch-7.7.0.jar:7.7.0]
        at org.elasticsearch.bootstrap.Bootstrap$5.<init>(Bootstrap.java:227) ~[elasticsearch-7.7.0.jar:7.7.0]
        at org.elasticsearch.bootstrap.Bootstrap.setup(Bootstrap.java:227) ~[elasticsearch-7.7.0.jar:7.7.0]
        at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:393) ~[elasticsearch-7.7.0.jar:7.7.0]
        at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:170) ~[elasticsearch-7.7.0.jar:7.7.0]
        ... 6 more

```

Certificate file is into the conf directory (/etc/elasticsearch/)

Any help would be highly appreciated.

Thanks,  
Bijender

---

<div class="post-metadata">

**Author:** ![ikakavas](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ikakavas/32/34430_2.png) [@ikakavas](https://discuss.elastic.co/u/ikakavas)\
**Post date:** [June 8, 2020, 12:06pm UTC](https://discuss.elastic.co/t/getting-java-nio-file-nosuchfileexception-while-starting-es/236165/2 "2020-06-08T12:06:44Z")

</div>

> [@bijender\_kr](#):
>
> Certificate file is into the conf directory (/etc/elasticsearch/)

This doesn't appear to be the case. What's the output of

```auto
ls -la /etc/elasticsearch

```

---

<div class="post-metadata">

**Author:** ![bijender\_kr](https://avatars.discourse-cdn.com/v4/letter/b/9de053/32.png) [@bijender\_kr](https://discuss.elastic.co/u/bijender_kr)\
**Post date:** [June 8, 2020, 12:12pm UTC](https://discuss.elastic.co/t/getting-java-nio-file-nosuchfileexception-while-starting-es/236165/3 "2020-06-08T12:12:28Z")

</div>

here is the output

```auto
[root@anddevelastic03 ~]# ls -la /etc/elasticsearch
total 64
drwxr-s--- 3 root elasticsearch 4096 Jun 8 07:26 .
drwxr-xr-x. 106 root root 8192 May 27 15:31 ..
-rw-rw---- 1 root elasticsearch 335 Jun 8 07:25 elasticsearch.keystore
-rw-r--r-- 1 root elasticsearch 76 May 19 13:48 .elasticsearch.keystore.initial_md5sum
-rw-rw---- 1 root elasticsearch 3302 Jun 8 07:26 elasticsearch.yml
-rwxrwxrwx 1 root elasticsearch 2527 Jun 8 07:23 elastic-stack-ca.p12
-rw-rw---- 1 root elasticsearch 2373 May 20 07:31 jvm.options
drwxr-s--- 2 root elasticsearch 6 May 11 22:10 jvm.options.d
-rw-rw---- 1 root elasticsearch 17419 May 11 22:06 log4j2.properties
-rw-rw---- 1 root elasticsearch 473 May 11 22:06 role_mapping.yml
-rw-rw---- 1 root elasticsearch 197 May 11 22:06 roles.yml
-rw-rw---- 1 root elasticsearch 0 May 11 22:06 users
-rw-rw---- 1 root elasticsearch 0 May 11 22:06 users_roles

```

---

<div class="post-metadata">

**Author:** ![ikakavas](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ikakavas/32/34430_2.png) [@ikakavas](https://discuss.elastic.co/u/ikakavas)\
**Post date:** [June 8, 2020, 12:27pm UTC](https://discuss.elastic.co/t/getting-java-nio-file-nosuchfileexception-while-starting-es/236165/4 "2020-06-08T12:27:54Z")

</div>

Well as you can see for yourself `elastic-certificates.p12` is not there, and this is why you get an error

---

<div class="post-metadata">

**Author:** ![bijender\_kr](https://avatars.discourse-cdn.com/v4/letter/b/9de053/32.png) [@bijender\_kr](https://discuss.elastic.co/u/bijender_kr)\
**Post date:** [June 8, 2020, 12:37pm UTC](https://discuss.elastic.co/t/getting-java-nio-file-nosuchfileexception-while-starting-es/236165/5 "2020-06-08T12:37:16Z")

</div>

Thanks, I miss typed this into the yml file.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2020, 12:37pm UTC](https://discuss.elastic.co/t/getting-java-nio-file-nosuchfileexception-while-starting-es/236165/6 "2020-07-06T12:37:19Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
