# Kubernetes How disable SSL getting Elasticsearch Unreachable: \[https://elastic:xxxxxx@myhost.elastic-namespace.svc:9200/

**URL:** <https://discuss.elastic.co/t/kubernetes-how-disable-ssl-getting-elasticsearch-unreachable-https-elastic-xxxxxx-myhost-elastic-namespace-svc-9200/260985>\
**Category:** Logstash\
**Created:** [January 13, 2021, 11:18am UTC](https://discuss.elastic.co/t/kubernetes-how-disable-ssl-getting-elasticsearch-unreachable-https-elastic-xxxxxx-myhost-elastic-namespace-svc-9200/260985 "2021-01-13T11:18:11Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![umen](https://avatars.discourse-cdn.com/v4/letter/u/ec9cab/32.png) [@umen](https://discuss.elastic.co/u/umen)\
**Post date:** [January 13, 2021, 11:18am UTC](https://discuss.elastic.co/t/kubernetes-how-disable-ssl-getting-elasticsearch-unreachable-https-elastic-xxxxxx-myhost-elastic-namespace-svc-9200/260985/1 "2021-01-13T11:18:11Z")

</div>

i saw a lot of problems with this issue, looks like it is impossible to disable the SSL in logstash when connecting to elasticsearch  
i want to disable it , i don't what to use it this is an internal app.  
this configuration doesn't work

```auto
output {
      stdout { codec => rubydebug }
      elasticsearch {
        index => "logstash-%{[@metadata]}"
        hosts => ["https://myhost.elastic-namespace.svc:9200"]
        user => "elastic"
        password => "xxxxxx"
        ssl_certificate_verification => false
        ssl => true
      }
    }

```

I can see [here](https://github.com/logstash-plugins/logstash-output-elasticsearch/issues/433)  
that it is a bug ,  
is there any way to create maybe tmp certificate or something similar? to make this logstash work ?  
Im deploying to kubernetics

getting this error in logstash pod :

```auto
Elasticsearch Unreachable: [https://elastic:xxxxxx@myhost.elastic-namespace.svc:9200/][Manticore::ClientProtocolException] PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target"}
[WARN] 2021-01-13 09:12:26.024 [Ruby-0-Thread-4: /usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-10.7.0-java/lib/logstash/outputs/elasticsearch/http_client/pool.rb:241] elasticsearch - Attempted to resurrect connection to dead ES instance, but got an error. {:url=>"https://elastic:xxxxxx@myhost.elastic-namespace.svc:9200/", :error_type=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError, :error=>"Elasticsearch Unreachable: [https://elastic:xxxxxx@myhost.elastic-namespace.svc:9200/][Manticore::ClientProtocolException] PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target"}

```

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [February 10, 2021, 11:18am UTC](https://discuss.elastic.co/t/kubernetes-how-disable-ssl-getting-elasticsearch-unreachable-https-elastic-xxxxxx-myhost-elastic-namespace-svc-9200/260985/2 "2021-02-10T11:18:16Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
