# Installing elasticsearch 7.12 , facing java.security.cert.CertificateException error while setting password/installation **URL:** \ **Category:** Elasticsearch\ **Tags:** elastic-stack-security\ **Created:** [September 24, 2021, 9:20am UTC](https://discuss.elastic.co/t/installing-elasticsearch-7-12-facing-java-security-cert-certificateexception-error-while-setting-password-installation/285062 "2021-09-24T09:20:26Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![Neha\_goswami](https://avatars.discourse-cdn.com/v4/letter/n/f475e1/32.png) [@Neha\_goswami](https://discuss.elastic.co/u/Neha_goswami)\ **Post date:** [September 24, 2021, 9:20am UTC](https://discuss.elastic.co/t/installing-elasticsearch-7-12-facing-java-security-cert-certificateexception-error-while-setting-password-installation/285062/1 "2021-09-24T09:20:26Z")
I am setting Elasticsearch 7.12 cluster for the first time and i see below errors: There seems to be some xpack setup issue: `$ bin/Elasticsearch-setup-passwords interactive warning: usage of JAVA\_HOME is deprecated, use ES\_JAVA\_HOME 08:51:29.774 [main] DEPRECATION org.Elasticsearch.deprecation.common.settings.Settings - [keystore.password] setting was deprecated in Elasticsearch and will be removed in a future release! See the breaking changes documentation for the next major version. 08:51:29.781 [main] DEPRECATION org.Elasticsearch.deprecation.common.settings.Settings - [keystore.password] setting was deprecated in Elasticsearch and will be removed in a future release! See the breaking changes documentation for the next major version. 08:51:30.686 [main] WARN org.Elasticsearch.common.ssl.DiagnosticTrustManager - failed to establish trust with server at [10.203.36.162]; the server provided a certificate with subject name [C=US,ST=California,O=Apple Inc.,OU=management:idms.group.949016,[CN=rn-boltd-lapp18.rno.apple.com](http://CN=rn-boltd-lapp18.rno.apple.com)] and fingerprint [8cb0da0a39b2df3b80ca3a8c4613c888b6f22f32]; the certificate has subject alternative names [DNS:rn-boltd-lapp18.rno.apple.com]; the certificate is issued by [C=US,O=Apple Inc.,OU=Certification Authority,CN=Apple Corporate Server CA 1]; the certificate is signed by (subject [C=US,O=Apple Inc.,OU=Certification Authority,CN=Apple Corporate Server CA 1] fingerprint [ba688c9b20190e2fa4edad752275fd4837bedcff]) signed by (subject [C=US,O=Apple Inc.,OU=Certification Authority,CN=Apple Corporate Root CA] fingerprint [a171dcdee08b1bae30a1ae6cc6d4033bfdef91ce] {trusted issuer}) which is self-issued; the [C=US,O=Apple Inc.,OU=Certification Authority,CN=Apple Corporate Root CA] certificate is trusted in this ssl context ([xpack.security.http.ssl]) java.security.cert.CertificateException: No subject alternative names matching IP address 10.203.36.162 found at sun.security.util.HostnameChecker.matchIP(HostnameChecker.java:160) ~[?:?] at sun.security.util.HostnameChecker.match(HostnameChecker.java:96) ~[?:?] at sun.security.ssl.X509TrustManagerImpl.checkIdentity(X509TrustManagerImpl.java:455) ~[?:?] at sun.security.ssl.X509TrustManagerImpl.checkIdentity(X509TrustManagerImpl.java:429) ~[?:?] at sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:229) ~[?:?] at sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:129) ~[?:?] at org.Elasticsearch.common.ssl.DiagnosticTrustManager.checkServerTrusted(DiagnosticTrustManager.java:79) [Elasticsearch-ssl-config-7.12.1.jar:7.12.1] at sun.security.ssl.CertificateMessage$T12CertificateConsumer.checkServerCerts(CertificateMessage.java:625) [?:?] at sun.security.ssl.CertificateMessage$T12CertificateConsumer.onCertificate(CertificateMessage.java:460) [?:?] at sun.security.ssl.CertificateMessage$T12CertificateConsumer.consume(CertificateMessage.java:360) [?:?]` Below is my Elasticsearch.yml file: ` cluster.name: bolt\_elastic\_stg\_x http.host: [rn-XYXABC.XYZ.com](http://rn-XYXABC.XYZ.com) network.host: [rn-XYXABC.XYZ.com](http://rn-XYXABC.XYZ.com) transport.tcp.port: 9300 node.name: MASTER1 node.master: true node.data: true http.port: 9200 discovery.zen.ping.unicast.hosts: ["[rn-XYXABC.XYZ.com:9300](http://rn-XYXABC.XYZ.com:9300)", "rn-boltd-server2:9300","rn-boltd-server3:9300"] path.data: /ngs/app/boltd/Elasticsearch/data path.logs: /ngs/app/boltd/Elasticsearch/logs bootstrap.system\_call\_filter: false xpack.security.enabled: true xpack.security.http.ssl.enabled: true xpack.security.http.ssl.supported\_protocols: TLSv1.2 xpack.security.http.ssl.client\_authentication: optional xpack.security.http.ssl.keystore.password: testpassword xpack.security.http.ssl.keystore.path: /ngs/app/boltd/Elasticsearch/Elasticsearch-7.12.1/config/keystore/keystore.jks xpack.security.transport.ssl.keystore.password: boltelastic xpack.security.transport.ssl.keystore.path: /ngs/app/boltd/Elasticsearch/Elasticsearch-7.12.1/config/keystore/keystore.jks xpack.security.transport.ssl.enabled: true xpack.security.authc.realms: ldap.ldap1: order: 1 url: "ldaps://ldap.example.com/" user\_dn\_templates: - "cn={0}, ou=users, o=marketing, dc=example, dc=com" - "cn={0}, ou=users, o=engineering, dc=example, dc=com" #xpack.security.authc.realms.ssl.type: pki xpack.security.transport.ssl.verification\_mode: certificate #xpack.security.authc.realms.ssl.order: 0 -bash-4.2$ ` pls help here ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [September 29, 2021, 1:24am UTC](https://discuss.elastic.co/t/installing-elasticsearch-7-12-facing-java-security-cert-certificateexception-error-while-setting-password-installation/285062/2 "2021-09-29T01:24:00Z")
> [@Neha\_goswami](#): > > java.security.cert.CertificateException: No subject alternative names matching IP address 10.203.36.162 found You will need to share how you created your certificates please. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [October 27, 2021, 1:24am UTC](https://discuss.elastic.co/t/installing-elasticsearch-7-12-facing-java-security-cert-certificateexception-error-while-setting-password-installation/285062/3 "2021-10-27T01:24:22Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.