I was trying to set up SSL/TLS between beats and input beats in logstash. To create the certificates, I used the following commands: ### creating logstash.p12 elasticsearch-certutil crl --ca /usr/share/elasticsearch/config/certs/elastic-stack-ca.p 12 -in /usr/share/elasticsearch/config/certs/instan…

Hi @Ruslan_Hafizov Welcome to the community. [image] Ruslan_Hafizov: pkcs8.key Edited Corrected!! @Rios is correct! :grinning_face: You need the pks8 format on the logstash beats input side [image] Beats input plugin | Elastic Documentation Plugin version: v7.0.0, Released on: …

Only input beats in LS need ssl_key in the PKCS8 format . It's also on github . Other use the PEM format, LS output and FB output .

Thank you all for your answers. This is actually my mistake, but I've also tried this option before. In this case, I was getting a different error : [2025-05-04T17:17:02,007][WARN ][io.netty.channel.DefaultChannelPipeline][main][b69a2eb3cac144215f5159fc01021d41845460d18e73f609de0fb868bbf430b5] An e…

You should use the elastic cert util and only use the openssl tool as directed to make the pks8 key. Here are the comands I ran $ ./bin/elasticsearch-certutil ca --pem $ unzip elastic-stack-ca.zip $ ./bin/elasticsearch-certutil cert --name logstash --ca-cert ./ca/ca.crt --ca-key ./ca/ca.key --dn…

[image] stephenb: openssl pkcs8 -inform PEM -in ./logstash/logstash.key -topk8 -nocrypt -outform PEM -out ./logstash/logstash.pkcs8.key I tried to do what was mentioned above. It didn't help, the error remained the same: [2025-05-05T07:44:01,838][WARN ][io.netty.channel.DefaultChannelPipelin…

Hey ! Same error message ? Can we try to debug the SSL part with openssl s_client ? openssl s_client -connect logstash:5044 -CAfile </path/ca.crt> -cert </path/client.crt> -key </path/client.key> Please share the output, be aware of potential sensitive information before sharing :wink:

I'm trying to set up SSL/TLS between Beats and Logstash using certificates I generated with elasticsearch-certutil and openssl. The Logstash input config expects client authentication, and I provided the necessary certs and keys, including logstash.pkcs8.key and client.crt. My Logstash input config…

I get the following: CONNECTED(00000003) Can't use SSL_get_servername depth=1 CN = Elastic Certificate Tool Autogenerated CA verify return:1 depth=0 CN = logstash verify return:1 --- Certificate chain 0 s:CN = logstash i:CN = Elastic Certificate Tool Autogenerated CA a:PKEY: rsaEncryption, 2…

This is one of the options I've been checking. - 4. I checked, everything is fine openssl verify -CAfile ca.crt ../beats/beat.crt ../beats/beat.crt: OK

[image] khan1: output.logstash: hosts: ["logstash:5044"] ssl: enabled: true certificate_authorities: ["/etc/pki/root/ca.crt"] certificate: "/logstash/certs/client.crt" key: "/logstash/certs/logstash.pkcs8.key". ^^^^^ THIS IS NOT CORRECT USE NORMAL NON PKCS8.KEY key_pa…

Logstash does not accept SSL connections from beats

Elastic Stack Logstash

Ruslan_Hafizov (Ruslan Hafizov) May 7, 2025, 1:12pm 12

I thank the participants for their answers. My problem was on the output for beats side. I used an extra ssl prefix.

2 Likes

Topic		Replies	Views
Logstash beats input cant start with ssl enabled Logstash	4	783	October 26, 2020
Secure filebeat to logstash Beats filebeat	22	2073	August 27, 2020
Logstash beats input doesn't find certificates Logstash	2	1047	July 6, 2017
Filebeat could not connect to logstash on SSL Beats filebeat	6	3962	November 30, 2018
SSL between Filebeat and Logstash using .p12 Logstash	8	5415	May 9, 2018

Logstash does not accept SSL connections from beats

Related topics