# Hostname verification turn off for curl requests
**URL:** https://discuss.elastic.co/t/hostname-verification-turn-off-for-curl-requests/209800
**Category:** Elasticsearch
**Tags:** elastic-stack-security
**Created:** [November 28, 2019, 6:50am UTC](https://discuss.elastic.co/t/hostname-verification-turn-off-for-curl-requests/209800 "2019-11-28T06:50:51Z")
**Posts on this page:** 7
**Page:** 1
### Author:  [@akshay\_singh2](https://discuss.elastic.co/u/akshay_singh2)
#### Post date: [November 28, 2019, 6:50am UTC](https://discuss.elastic.co/t/hostname-verification-turn-off-for-curl-requests/209800/1 "2019-11-28T06:50:52Z")
Hello Elastic,
I'm setting up new elastic cluster with security with certificates. However when doing curl requests its not working out, any help on this will be much appreciated.
elasticsearch.yml :
```
node.name=${HOSTNAME}
node.master=true
node.data=false
http.cors.enabled=true
http.cors.allow-origin=*
ES_JAVA_OPTS=-Xms5g -Xmx5g
discovery.zen.ping.unicast.hosts=es-master
discovery.zen.minimum_master_nodes=2
cluster.routing.allocation.awareness.attributes=rack_id
cluster.name=es-cluster
cluster.initial_master_nodes=es-master-0, es-master-1, es-master-3
xpack.security.enabled=true
xpack.security.transport.ssl.enabled=true
xpack.security.transport.ssl.verification_mode=certificate
xpack.security.transport.ssl.keystore.path=certs/elastic-certificates.p12
xpack.security.transport.ssl.truststore.path=certs/elastic-certificates.p12
xpack.security.http.ssl.enabled: true
xpack.security.http.ssl.keystore.path: certs/elastic-certificates.p12
xpack.security.http.ssl.truststore.path: certs/elastic-certificates.p12
xpack.security.http.ssl.client_authentication: optional
```
---
### Author:  [@ikakavas](https://discuss.elastic.co/u/ikakavas)
#### Post date: [November 28, 2019, 8:01am UTC](https://discuss.elastic.co/t/hostname-verification-turn-off-for-curl-requests/209800/2 "2019-11-28T08:01:45Z")
> [@akshay\_singh2](#):
>
> However when doing curl requests its not working out,
This is normal and expected. You are using a certificate that you have generated yourself signed by a Certificate Authority that you have also generated youself and curl is by default using your OS truststore, that obviously knows nothing about this custom Certificate Authority.
1. You can use the `-k` flag with curl that will disable verification of the server's certificate or, even better
2. a. Export the CA certificate from the PKCS#12 bundle you have with
` openssl pkcs12 -in elastic-certificates.p12 -cacerts -nokeys | sed '/-----BEGIN CERTIFICATE-----/,$!d' > cacert.crt `
b. Run curl with `--cacert cacert.crt` so that it can validate the server's certificate correctly
---
### Author:  [@akshay\_singh2](https://discuss.elastic.co/u/akshay_singh2)
#### Post date: [November 28, 2019, 9:08am UTC](https://discuss.elastic.co/t/hostname-verification-turn-off-for-curl-requests/209800/3 "2019-11-28T09:08:40Z")
Im trying to curl the request from browser and its failing, also cant able to connect using elastic head browser plugin.
---
### Author:  [@ikakavas](https://discuss.elastic.co/u/ikakavas)
#### Post date: [November 28, 2019, 9:33am UTC](https://discuss.elastic.co/t/hostname-verification-turn-off-for-curl-requests/209800/4 "2019-11-28T09:33:48Z")
The only mention of hostname verification in that blog post that I can find is
> Also note that the `-k` option is required as we did not create certificates with the hostnames specified, and therefore hostname verification must be turned off.
which is equivalent to what I'm saying in `1.` above. Not sure what you mean, but please feel free to elaborate and add some detail to your question
---
### Author:  [@akshay\_singh2](https://discuss.elastic.co/u/akshay_singh2)
#### Post date: [November 28, 2019, 10:21am UTC](https://discuss.elastic.co/t/hostname-verification-turn-off-for-curl-requests/209800/5 "2019-11-28T10:21:29Z")
Is there any way to disable that from elastic side?
---
### Author:  [@ikakavas](https://discuss.elastic.co/u/ikakavas)
#### Post date: [November 28, 2019, 10:39am UTC](https://discuss.elastic.co/t/hostname-verification-turn-off-for-curl-requests/209800/6 "2019-11-28T10:39:51Z")
You can't configure curl's behavior in elasticsearch, so I'm not really sure what you are asking. Hostname verification is something that the client ( curl ) does, how would you configure this in elasticsearch ?
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [December 26, 2019, 10:39am UTC](https://discuss.elastic.co/t/hostname-verification-turn-off-for-curl-requests/209800/7 "2019-12-26T10:39:57Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.