# Logstash service fails - OpenSSL X509 StoreError

**URL:** <https://discuss.elastic.co/t/logstash-service-fails-openssl-x509-storeerror/60282>\
**Category:** Logstash\
**Created:** [September 12, 2016, 11:44am UTC](https://discuss.elastic.co/t/logstash-service-fails-openssl-x509-storeerror/60282 "2016-09-12T11:44:15Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Benom](https://avatars.discourse-cdn.com/v4/letter/b/4af34b/32.png) [@Benom](https://discuss.elastic.co/u/Benom)\
**Post date:** [September 12, 2016, 11:44am UTC](https://discuss.elastic.co/t/logstash-service-fails-openssl-x509-storeerror/60282/1 "2016-09-12T11:44:15Z")

</div>

Hello,

I've noticed the logstash service fail on each start.  
logstash.err shows:

> ```
> > OpenSSL::X509::StoreError: setting default path failed: IOError
> > set_default_paths at org/jruby/ext/openssl/X509Store.java:185
> > (root) at /opt/logstash/vendor/jruby/lib/ruby/shared/jopenssl/load.rb:26
> > require at org/jruby/RubyKernel.java:1040
> > (root) at /opt/logstash/vendor/jruby/lib/ruby/shared/openssl.rb:1
> > require at org/jruby/RubyKernel.java:1040
> > (root) at /opt/logstash/vendor/jruby/lib/ruby/shared/openssl.rb:1
> > require at org/jruby/RubyKernel.java:1040
> > (root) at /opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-core-2.4.0-java/lib/logstash/patches/stronger_openssl_defaults.rb:1
> > require at org/jruby/RubyKernel.java:1040
> > (root) at /opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-core-2.4.0-java/lib/logstash/patches/stronger_openssl_defaults.rb:2
> > require at org/jruby/RubyKernel.java:1040
> > (root) at /opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-core-2.4.0-java/lib/logstash/patches.rb:1
> > require at org/jruby/RubyKernel.java:1040
> > (root) at /opt/logstash/lib/bootstrap/environment.rb:69
> 
> ```

I ran logstash manually as root and it runs well.  
I've also copied the exact command running when the service starts using ps -ef and tried it as well.  
I've enabled login to logstash and tried running the same command, and I got an error. Adding the user to the root group did not help. I'm guessing it is either a permission problem or an environment variable that is not configured well, and would appreciate any help or idea I could check.

Thank you.

---

<div class="post-metadata">

**Author:** ![jclaudias](https://avatars.discourse-cdn.com/v4/letter/j/3d9bf3/32.png) [@jclaudias](https://discuss.elastic.co/u/jclaudias)\
**Post date:** [January 23, 2017, 7:57pm UTC](https://discuss.elastic.co/t/logstash-service-fails-openssl-x509-storeerror/60282/2 "2017-01-23T19:57:34Z")

</div>

I am receiving the same issue and can't find any solutions to this issue.

---

<div class="post-metadata">

**Author:** ![andrp](https://avatars.discourse-cdn.com/v4/letter/a/43a26b/32.png) [@andrp](https://discuss.elastic.co/u/andrp)\
**Post date:** [May 16, 2017, 7:34am UTC](https://discuss.elastic.co/t/logstash-service-fails-openssl-x509-storeerror/60282/3 "2017-05-16T07:34:06Z")

</div>

same issue on my side.  
has anyone of you found a solution yet?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 4:26am UTC](https://discuss.elastic.co/t/logstash-service-fails-openssl-x509-storeerror/60282/4 "2017-07-06T04:26:33Z")

</div>

Closed on July 6, 2017, 4:26am UTC