Kibana: FATAL Error: error:0909006C:PEM routines:get_name:no start line

Elastic Stack Kibana
1

Environment: Centos 7
ES verion: 7.17.8
Kibana: 7.17.8

I created a 3 nodes Elastic-cluster with xpack-security configured. I then add Kibana, Elasticseach <-> Kibana SSL is working, certificates were generated using elasticsearch-certutil.

Moving to securing Brower <-> Kibana communcaiton, below were configured in Kibana kibana.yml:

server.ssl.enabled: true
server.ssl.certificate: "/etc/pki/tls/certs/server.crt"
server.ssl.key: "/etc/pki/tls/certs/server.key"

where server.crt was obtained from GoDaddy.

I started Kibana and I faced the following error:

kibana kibana: FATAL  Error: error:0909006C:PEM routines:get_name:no start line
kibana systemd: kibana.service: main process exited, code=exited, status=1/FAILURE

If I commented below, kibana starts correctly and without SSL of course.

server.ssl.enabled: true
server.ssl.certificate: "/etc/pki/tls/certs/server.crt"
server.ssl.key: "/etc/pki/tls/certs/server.key"

The same setup works in other versions like 7.15.X and 7.11.X. I have no idea what's has been changed in 7.17.8.

The server.crt looks correct and it is PEM formatted.

Any ideas?

2

Hi @candy609 , welcome to the community !

May be worth reading: docusignapi - Error: error:0909006C:PEM routines:get_name:no start line - node - Stack Overflow
There could 2 possibilities here: either some structural issue with certificate OR certificate permissions to access.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.