Getting "signed fields invalid" when configure HTTPS to Elastic HTTP layer with X-Pack

[ikakavas (Ioannis Kakavas)]

@Victor_Guimaraes

From the link you posted above, the Exception are throw from the method private void parse(DerValue val) , my certificate are not a DER, but a PEM certificate as you can see on previous posts. Has any other configurations I must add to my elasticsearch.yml file to force then to parse the certificate as a PEM format?

PEM formatted certificates contain DER encoded data so code eventually needs to parse the DER structure. See this awesome reply from Tim regarding certificate encoding, formatting, etc.

@Victor_Guimaraes

I'm using the same certificate on many other places, as the Elasticsearch using SearchGuard and are working fine.

I'm not arguing against that, I'm only saying what your logs are implying.

• What Java version are you using in your other Elasticsearch installation?
• Can you try and run this Elasticsearch instance with Java 11 ?
• Can you try and run your other Elasticsearch installation with Java 12 ?

Not sure what else to suggest without being able to test against your certificate/key.