# Kibana - ERR\_OSSL\_PEM\_NO\_START\_LINE

**URL:** <https://discuss.elastic.co/t/kibana-err-ossl-pem-no-start-line/287873>\
**Category:** Kibana\
**Tags:** elastic-stack-security\
**Created:** [October 28, 2021, 5:29am UTC](https://discuss.elastic.co/t/kibana-err-ossl-pem-no-start-line/287873 "2021-10-28T05:29:13Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Trinity\_Rolling](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/trinity_rolling/32/96443_2.png) [@Trinity\_Rolling](https://discuss.elastic.co/u/Trinity_Rolling)\
**Post date:** [October 28, 2021, 5:29am UTC](https://discuss.elastic.co/t/kibana-err-ossl-pem-no-start-line/287873/1 "2021-10-28T05:29:13Z")

</div>

Elasticsearch SSL is working. Moving onto Kibana SSL.  
I've followed the documents to generate new csr requests for Kibana-server.cer and kibana-server.key files. I've placed them in the kibana config directory. I've updated the kibana.yml file to include these paths on Windows Server 2019. I am using a Windows Certificate Authority for signing certificate requests. I've download the CA Root certificate as a .cer file for Elasticsearch.ssl.certificateAuthorities. This is the same CA certificate used for Elasticsearch. I continue to receive the following error:

```auto
PS C:\Program Files\Elastic\Kibana\bin> .\kibana.bat
  log [00:24:06.427] [info][plugins-service] Plugin "metricsEntities" is disabled.
  log [00:24:06.506] [fatal][root] Error: error:0909006C:PEM routines:get_name:no start line
    at Object.createSecureContext (_tls_common.js:129:17)
    at Server.setSecureContext (_tls_wrap.js:1330:27)
    at Server (_tls_wrap.js:1185:8)
    at new Server (https.js:74:3)
    at Object.createServer (https.js:110:10)
    at module.exports.internals.Core._createListener (C:\Program Files\Elastic\Kibana\node_modules\@hapi\hapi\lib\core.js:539:79)
    at new module.exports.internals.Core (C:\Program Files\Elastic\Kibana\node_modules\@hapi\hapi\lib\core.js:133:30)
    at new module.exports (C:\Program Files\Elastic\Kibana\node_modules\@hapi\hapi\lib\server.js:23:18)
    at createServer (C:\Program Files\Elastic\Kibana\node_modules\@kbn\server-http-tools\target_node\create_server.js:18:18)
    at HttpServer.setup (C:\Program Files\Elastic\Kibana\src\core\server\http\http_server.js:106:53)
    at HttpService.preboot (C:\Program Files\Elastic\Kibana\src\core\server\http\http_service.js:76:51)
    at Server.preboot (C:\Program Files\Elastic\Kibana\src\core\server\server.js:200:25)
    at Root.preboot (C:\Program Files\Elastic\Kibana\src\core\server\root\index.js:44:14)
    at bootstrap (C:\Program Files\Elastic\Kibana\src\core\server\bootstrap.js:99:9)
    at Command.<anonymous> (C:\Program Files\Elastic\Kibana\src\cli\serve\serve.js:226:5) {
  library: 'PEM routines',
  function: 'get_name',
  reason: 'no start line',
  code: 'ERR_OSSL_PEM_NO_START_LINE'
}

 FATAL Error: error:0909006C:PEM routines:get_name:no start line

```

What am I missing?

---

<div class="post-metadata">

**Author:** ![Trinity\_Rolling](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/trinity_rolling/32/96443_2.png) [@Trinity\_Rolling](https://discuss.elastic.co/u/Trinity_Rolling)\
**Post date:** [October 28, 2021, 6:05am UTC](https://discuss.elastic.co/t/kibana-err-ossl-pem-no-start-line/287873/2 "2021-10-28T06:05:48Z")

</div>

I was able to get past this error by exporting my certificates from the Windows CA in Base64 format not DER . I then encountered a secondary error regarding bad\_decrypt. What was not written in any documentation is there is a configuration setting that needs to be entered when you set a passphrase on a certificate when the key is generated. Seems pretty important detail to miss in ALL of the documentation.

1 - Export Windows Certificates in Base64 format  
2 - server.ssl.keyPassphrase: or Elasticsearch.ssl.keyPassphrase: in the kibana.yml

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 25, 2021, 6:05am UTC](https://discuss.elastic.co/t/kibana-err-ossl-pem-no-start-line/287873/3 "2021-11-25T06:05:59Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.