# Kibana: FATAL Error: error:0909006C:PEM routines:get\_name:no start line

**URL:** <https://discuss.elastic.co/t/kibana-fatal-error-errorpem-routinesno-start-line/324595>\
**Category:** Kibana\
**Tags:** elastic-stack-security\
**Created:** [February 3, 2023, 3:26am UTC](https://discuss.elastic.co/t/kibana-fatal-error-errorpem-routinesno-start-line/324595 "2023-02-03T03:26:47Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![candy609](https://avatars.discourse-cdn.com/v4/letter/c/f4b2a3/32.png) [@candy609](https://discuss.elastic.co/u/candy609)\
**Post date:** [February 3, 2023, 3:26am UTC](https://discuss.elastic.co/t/kibana-fatal-error-errorpem-routinesno-start-line/324595/1 "2023-02-03T03:26:47Z")

</div>

Environment: Centos 7  
ES verion: 7.17.8  
Kibana: 7.17.8

I created a 3 nodes Elastic-cluster with xpack-security configured. I then add Kibana, Elasticseach \<-\> Kibana SSL is working, certificates were generated using elasticsearch-certutil.

Moving to securing Brower \<-\> Kibana communcaiton, below were configured in Kibana kibana.yml:

```auto
server.ssl.enabled: true
server.ssl.certificate: "/etc/pki/tls/certs/server.crt"
server.ssl.key: "/etc/pki/tls/certs/server.key"

```

where server.crt was obtained from GoDaddy.

I started Kibana and I faced the following error:

```auto
kibana kibana: FATAL Error: error:0909006C:PEM routines:get_name:no start line
kibana systemd: kibana.service: main process exited, code=exited, status=1/FAILURE

```

If I commented below, kibana starts correctly and without SSL of course.

```auto
server.ssl.enabled: true
server.ssl.certificate: "/etc/pki/tls/certs/server.crt"
server.ssl.key: "/etc/pki/tls/certs/server.key"

```

The same setup works in other versions like 7.15.X and 7.11.X. I have no idea what's has been changed in 7.17.8.

The server.crt looks correct and it is PEM formatted.

Any ideas?

---

<div class="post-metadata">

**Author:** ![Ayush\_Mathur](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ayush_mathur/32/77134_2.png) [@Ayush\_Mathur](https://discuss.elastic.co/u/Ayush_Mathur)\
**Post date:** [February 3, 2023, 7:34am UTC](https://discuss.elastic.co/t/kibana-fatal-error-errorpem-routinesno-start-line/324595/2 "2023-02-03T07:34:04Z")

</div>

Hi @candy609 , welcome to the community !

> [@candy609](#):
>
> `error:0909006C:PEM routines:get_name:no start line`

May be worth reading: [docusignapi - Error: error:0909006C:PEM routines:get\_name:no start line - node - Stack Overflow](https://stackoverflow.com/questions/63030755/error-error0909006cpem-routinesget-nameno-start-line-node)  
There could 2 possibilities here: either some structural issue with certificate OR certificate permissions to access.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 3, 2023, 7:34am UTC](https://discuss.elastic.co/t/kibana-fatal-error-errorpem-routinesno-start-line/324595/3 "2023-03-03T07:34:27Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.