# Kibana EVP\_DecryptFinal Error - OpenSSL Version? **URL:** \ **Category:** Kibana\ **Created:** [June 23, 2023, 2:54pm UTC](https://discuss.elastic.co/t/kibana-evp-decryptfinal-error-openssl-version/336783 "2023-06-23T14:54:12Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![josh42](https://avatars.discourse-cdn.com/v4/letter/j/779978/32.png) [@josh42](https://discuss.elastic.co/u/josh42)\ **Post date:** [June 23, 2023, 2:54pm UTC](https://discuss.elastic.co/t/kibana-evp-decryptfinal-error-openssl-version/336783/1 "2023-06-23T14:54:12Z")
I'm trying to set up Kibana's server SSL and keep encountering an error related to decrypting the certificate. I created my certs through openssl, and Googling indicates an openssl mismatch might be causing this error. I know my Linux machine has openssl 1.1.1, is Kibana trying to decrypt the cert using a different program? The error (viewed through journalctl) is ```auto FATAL Error: error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt ``` Relevant kibana.yml code is: ```auto server.ssl.enabled: true server.ssl.certificate: /etc/kibana/mycert.crt server.ssl.key: /etc/kibana/my-cert.key ``` ---
**Author:** ![josh42](https://avatars.discourse-cdn.com/v4/letter/j/779978/32.png) [@josh42](https://discuss.elastic.co/u/josh42)\ **Post date:** [June 23, 2023, 6:22pm UTC](https://discuss.elastic.co/t/kibana-evp-decryptfinal-error-openssl-version/336783/2 "2023-06-23T18:22:49Z")
It turned out I was giving kibana the encrypted key, when it really wants the decrypted key. Changing this fixed the problem ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 21, 2023, 6:23pm UTC](https://discuss.elastic.co/t/kibana-evp-decryptfinal-error-openssl-version/336783/3 "2023-07-21T18:23:38Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.