# Logstash: installing plugin results in certificate verify failed error

**URL:** <https://discuss.elastic.co/t/logstash-installing-plugin-results-in-certificate-verify-failed-error/204076>\
**Category:** Logstash\
**Created:** [October 17, 2019, 2:37pm UTC](https://discuss.elastic.co/t/logstash-installing-plugin-results-in-certificate-verify-failed-error/204076 "2019-10-17T14:37:34Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![an.schall](https://avatars.discourse-cdn.com/v4/letter/a/eb9ed0/32.png) [@an.schall](https://discuss.elastic.co/u/an.schall)\
**Post date:** [October 17, 2019, 2:37pm UTC](https://discuss.elastic.co/t/logstash-installing-plugin-results-in-certificate-verify-failed-error/204076/1 "2019-10-17T14:37:34Z")

</div>

Hi, I am behind a corporate firewall with SSL interception. As many people here in this forum, I receive an SSL-related error when installing a logstash plugin:

`root@kali:/etc/ssl/certs# /usr/share/logstash/bin/logstash-plugin install logstash-input-syslog OpenJDK 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated in version 9.0 and will likely be removed in a future release. WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.headius.backport9.modules.Modules to method java.lang.Object.finalize() WARNING: Please consider reporting this to the maintainers of com.headius.backport9.modules.Modules WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release ERROR: Something went wrong when installing logstash-input-syslog, message: certificate verify failed`

I receive a similar error (certificate verify failed) when installing a locally built one (cloned the github repo and guild using gem).

I installed my company's root certificate and all intermediate certificates. What else could I try?

---

<div class="post-metadata">

**Author:** ![an.schall](https://avatars.discourse-cdn.com/v4/letter/a/eb9ed0/32.png) [@an.schall](https://discuss.elastic.co/u/an.schall)\
**Post date:** [October 17, 2019, 3:31pm UTC](https://discuss.elastic.co/t/logstash-installing-plugin-results-in-certificate-verify-failed-error/204076/2 "2019-10-17T15:31:51Z")

</div>

Actually, I solved it. After importing the certificate via:

```
cp ~/root.crt /usr/local/share/ca-certificates/EUM/
update-ca-certificates

```

I explicitly defined the certificate to be used for SSL session using the following environment variable:

```
export SSL_CERT_FILE=/etc/ssl/certs/EUM

```

Now it works.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 14, 2019, 3:31pm UTC](https://discuss.elastic.co/t/logstash-installing-plugin-results-in-certificate-verify-failed-error/204076/3 "2019-11-14T15:31:56Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
