# Getting "signed fields invalid" when configure HTTPS to Elastic HTTP layer with X-Pack

**URL:** <https://discuss.elastic.co/t/getting-signed-fields-invalid-when-configure-https-to-elastic-http-layer-with-x-pack/189162>\
**Category:** Elasticsearch\
**Tags:** elastic-stack-security\
**Created:** [July 5, 2019, 7:54pm UTC](https://discuss.elastic.co/t/getting-signed-fields-invalid-when-configure-https-to-elastic-http-layer-with-x-pack/189162 "2019-07-05T19:54:57Z")\
**Posts on this page:** 1\
**Showing post:** 7

<div class="post-metadata">

**Author:** ![ikakavas](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ikakavas/32/34430_2.png) [@ikakavas](https://discuss.elastic.co/u/ikakavas)\
**Post date:** [July 9, 2019, 3:32pm UTC](https://discuss.elastic.co/t/getting-signed-fields-invalid-when-configure-https-to-elastic-http-layer-with-x-pack/189162/7 "2019-07-09T15:32:19Z")

</div>

> [@Victor\_Guimaraes](#):
>
> From the link you posted above, the Exception are throw from the method `private void parse(DerValue val)` , my certificate are not a DER, but a PEM certificate as you can see on previous posts. Has any other configurations I must add to my `elasticsearch.yml` file to force then to parse the certificate as a PEM format?

PEM formatted certificates contain DER encoded data so code eventually needs to parse the DER structure. See [this awesome reply from Tim](https://discuss.elastic.co/t/elasticsearch-certificate-requirements/188143/2?) regarding certificate encoding, formatting, etc.

> [@Victor\_Guimaraes](#):
>
> I'm using the same certificate on many other places, as the Elasticsearch using SearchGuard and are working fine.

I'm not arguing against that, I'm only saying what your logs are implying.

- What Java version are you using in your other Elasticsearch installation?
- Can you try and run this Elasticsearch instance with Java 11 ?
- Can you try and run your other Elasticsearch installation with Java 12 ?

Not sure what else to suggest without being able to test against your certificate/key.

---

_[View the full topic](https://discuss.elastic.co/t/getting-signed-fields-invalid-when-configure-https-to-elastic-http-layer-with-x-pack/189162)._
