# Internode Security - getting this msg \[node00-10.0.87.1\] client did not trust this server's certificate, closing connection Netty4TcpChannel{localAddress=/10.0.87.1:9300, remoteAddress=/10.0.72.2:39994, profile=default}

**URL:** <https://discuss.elastic.co/t/internode-security-getting-this-msg-node00-10-0-87-1-client-did-not-trust-this-servers-certificate-closing-connection-netty4tcpchannel-localaddress-10-0-87-1-9300-remoteaddress-10-0-72-2-39994-profile-default/372904>\
**Category:** Elastic Search\
**Created:** [January 7, 2025, 6:35pm UTC](https://discuss.elastic.co/t/internode-security-getting-this-msg-node00-10-0-87-1-client-did-not-trust-this-servers-certificate-closing-connection-netty4tcpchannel-localaddress-10-0-87-1-9300-remoteaddress-10-0-72-2-39994-profile-default/372904 "2025-01-07T18:35:15Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![sakshijain](https://avatars.discourse-cdn.com/v4/letter/s/fbc32d/32.png) [@sakshijain](https://discuss.elastic.co/u/sakshijain)\
**Post date:** [January 7, 2025, 6:35pm UTC](https://discuss.elastic.co/t/internode-security-getting-this-msg-node00-10-0-87-1-client-did-not-trust-this-servers-certificate-closing-connection-netty4tcpchannel-localaddress-10-0-87-1-9300-remoteaddress-10-0-72-2-39994-profile-default/372904/1 "2025-01-07T18:35:15Z")

</div>

I am trying to setup internode security  
This is configuration I have added in elasticsearch.yml file

xpack.security.transport.ssl.enabled: true  
xpack.security.transport.ssl.keystore.path: /store/elasticsearch/node01/config/elastic-certificates.p12  
xpack.security.transport.ssl.truststore.path: /store/elasticsearch/node01/config/elastic-certificates.p12  
xpack.security.transport.ssl.verification\_mode: certificate

* * *

I have used the following command to generate certificate

./bin/elasticsearch-certutil ca  
./bin/elasticsearch-certutil cert --ca elastic-stack-ca.p12

* * *

Warning Msg

```auto
 [node00-10.0.87.1] client did not trust this server's certificate, closing connection Netty4TcpChannel{localAddress=/10.0.87.1:9300, remoteAddress=/10.0.72.1:60376, profile=default}
[2025-01-07T09:05:30,181][WARN][o.e.x.c.s.t.n.SecurityNetty4Transport] [node00-10.0.87.1] client did not trust this server's certificate, closing connection Netty4TcpChannel{localAddress=/10.0.87.1:9300, remoteAddress=/10.0.72.2:39994, profile=default}

____________________________________________________________________________

dN3_JPT7qWa_LajDvTIg}{node05-10.0.87.1}{10.0.87.1}{10.0.87.1:9305}{di}{8.10.2}{7000099-8100299}{rack=rack02, transform.config_version=10.0.0, xpack.installed=true, zone=zone2} (tried [1] times)
org.elasticsearch.transport.ConnectTransportException: [node05-10.0.87.1][10.0.87.1:9305] connect_exception
        at org.elasticsearch.transport.TcpTransport$ChannelsConnectedListener.onFailure(TcpTransport.java:1154) ~[elasticsearch-8.10.2.jar:?]
        at org.elasticsearch.action.support.SubscribableListener$FailureResult.complete(SubscribableListener.java:285) ~[elasticsearch-8.10.2.jar:?]
        at org.elasticsearch.action.support.SubscribableListener.tryComplete(SubscribableListener.java:197) ~[elasticsearch-8.10.2.jar:?]
        at org.elasticsearch.action.support.SubscribableListener.setResult(SubscribableListener.java:222) ~[elasticsearch-8.10.2.jar:?]
        at org.elasticsearch.action.support.SubscribableListener.onFailure(SubscribableListener.java:141) ~[elasticsearch-8.10.2.jar:?]
        at org.elasticsearch.transport.netty4.Netty4TcpChannel.lambda$addListener$0(Netty4TcpChannel.java:62) ~[?:?]
        at io.netty.util.concurrent.DefaultPromise.notifyListener0(DefaultPromise.java:590) ~[?:?]
        at io.netty.util.concurrent.DefaultPromise.notifyListeners0(DefaultPromise.java:583) ~[?:?]
        at io.netty.util.concurrent.DefaultPromise.notifyListenersNow(DefaultPromise.java:559) ~[?:?]
        at io.netty.util.concurrent.DefaultPromise.notifyListeners(DefaultPromise.java:492) ~[?:?]
        at io.netty.util.concurrent.DefaultPromise.setValue0(DefaultPromise.java:636) ~[?:?]
        at io.netty.util.concurrent.DefaultPromise.setFailure0(DefaultPromise.java:629) ~[?:?]
        at io.netty.util.concurrent.DefaultPromise.tryFailure(DefaultPromise.java:118) ~[?:?]
        at org.elasticsearch.xpack.core.security.transport.netty4.SecurityNetty4Transport$ClientSslHandlerInitializer.lambda$connect$0(SecurityNetty4Transport.java:352) ~[?:?]
        at io.netty.util.concurrent.DefaultPromise.notifyListener0(DefaultPromise.java:590) ~[?:?]
        at io.netty.util.concurrent.DefaultPromise.notifyListeners0(DefaultPromise.java:583) ~[?:?]
        at io.netty.util.concurrent.DefaultPromise.notifyListenersNow(DefaultPromise.java:559) ~[?:?]
        at io.netty.util.concurrent.DefaultPromise.notifyListeners(DefaultPromise.java:492) ~[?:?]
        at io.netty.util.concurrent.DefaultPromise.setValue0(DefaultPromise.java:636) ~[?:?]
        at io.netty.util.concurrent.DefaultPromise.setFailure0(DefaultPromise.java:629) ~[?:?]
        at io.netty.util.concurrent.DefaultPromise.tryFailure(DefaultPromise.java:118) ~[?:?]
        at io.netty.handler.ssl.SslHandler$7.run(SslHandler.java:2128) ~[?:?]
        at io.netty.util.concurrent.PromiseTask.runTask(PromiseTask.java:98) ~[?:?]
        at io.netty.util.concurrent.ScheduledFutureTask.run(ScheduledFutureTask.java:153) ~[?:?]
        at io.netty.util.concurrent.AbstractEventExecutor.runTask(AbstractEventExecutor.java:174) ~[?:?]
        at io.netty.util.concurrent.AbstractEventExecutor.safeExecute(AbstractEventExecutor.java:167) ~[?:?]
        at io.netty.util.concurrent.SingleThreadEventExecutor.runAllTasks(SingleThreadEventExecutor.java:470) ~[?:?]
        at io.netty.channel.nio.NioEventLoop.run(NioEventLoop.java:569) ~[?:?]
        at io.netty.util.concurrent.SingleThreadEventExecutor$4.run(SingleThreadEventExecutor.java:997) ~[?:?]
        at io.netty.util.internal.ThreadExecutorMap$2.run(ThreadExecutorMap.java:74) ~[?:?]
        at java.lang.Thread.run(Thread.java:1623) ~[?:?]
Caused by: org.elasticsearch.common.util.concurrent.UncategorizedExecutionException: Failed execution
        at org.elasticsearch.action.support.SubscribableListener.wrapAsExecutionException(SubscribableListener.java:178) ~[elasticsearch-8.10.2.jar:?]
        at org.elasticsearch.common.util.concurrent.ListenableFuture.wrapException(ListenableFuture.java:38) ~[elasticsearch-8.10.2.jar:?]
        at org.elasticsearch.common.util.concurrent.ListenableFuture.wrapException(ListenableFuture.java:27) ~[elasticsearch-8.10.2.jar:?]
        ... 27 more
Caused by: java.util.concurrent.ExecutionException: io.netty.handler.ssl.SslHandshakeTimeoutException: handshake timed out after 10000ms
        at org.elasticsearch.action.support.SubscribableListener.wrapAsExecutionException(SubscribableListener.java:178) ~[elasticsearch-8.10.2.jar:?]
        at org.elasticsearch.common.util.concurrent.ListenableFuture.wrapException(ListenableFuture.java:38) ~[elasticsearch-8.10.2.jar:?]
        at org.elasticsearch.common.util.concurrent.ListenableFuture.wrapException(ListenableFuture.java:27) ~[elasticsearch-8.10.2.jar:?]
        ... 27 more
Caused by: io.netty.handler.ssl.SslHandshakeTimeoutException: handshake timed out after 10000ms
        at io.netty.handler.ssl.SslHandler$7.run(SslHandler.java:2125) ~[?:?]
        ... 9 more

```

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [February 4, 2025, 6:35pm UTC](https://discuss.elastic.co/t/internode-security-getting-this-msg-node00-10-0-87-1-client-did-not-trust-this-servers-certificate-closing-connection-netty4tcpchannel-localaddress-10-0-87-1-9300-remoteaddress-10-0-72-2-39994-profile-default/372904/2 "2025-02-04T18:35:58Z")

</div>

Closed on February 4, 2025, 6:35pm UTC

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.