# Logstash TCP SSL Certificate Error

**URL:** <https://discuss.elastic.co/t/logstash-tcp-ssl-certificate-error/58832>\
**Category:** Logstash\
**Created:** [August 24, 2016, 2:25pm UTC](https://discuss.elastic.co/t/logstash-tcp-ssl-certificate-error/58832 "2016-08-24T14:25:06Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![jaykumar](https://avatars.discourse-cdn.com/v4/letter/j/439d5e/32.png) [@jaykumar](https://discuss.elastic.co/u/jaykumar)\
**Post date:** [August 24, 2016, 2:25pm UTC](https://discuss.elastic.co/t/logstash-tcp-ssl-certificate-error/58832/1 "2016-08-24T14:25:07Z")

</div>

I am trying to setup TCP SSL input, below is my configuration:

input {  
tcp {  
port =\> 9000  
host =\> "0.0.0.0"  
mode =\> "server"  
ssl\_enable =\> true  
ssl\_verify =\> false  
ssl\_extra\_chain\_certs =\> "/etc/ssl/cacert.crt"  
ssl\_cert =\> "/etc/ssl/logstashus.crt"  
ssl\_key =\> "/etc/ssl/logstashus.key"  
type =\> "syslog"  
tags =\> "syslog.imq.input"  
}  
}

Below is the process which I have followed to create certificates on Ubuntu:

openssl req -new -x509 -sha256 -extensions v3\_ca -keyout /etc/ssl/private/cakey.pem -out /etc/ssl/certs/cacert.pem -days 3650

openssl x509 -outform der -in /etc/ssl/certs/cacert.pem -out /etc/ssl/cacert.crt

openssl genrsa -out /etc/ssl/logstashus.key 2048

openssl req -new -key /etc/ssl/logstashus.key -out /etc/ssl/logstashus.csr -sha256

sudo openssl ca -in /etc/ssl/logstashus.csr -config /etc/ssl/openssl.cnf

copied output

---

<div class="post-metadata">

**Author:** ![jaykumar](https://avatars.discourse-cdn.com/v4/letter/j/439d5e/32.png) [@jaykumar](https://discuss.elastic.co/u/jaykumar)\
**Post date:** [August 24, 2016, 2:26pm UTC](https://discuss.elastic.co/t/logstash-tcp-ssl-certificate-error/58832/2 "2016-08-24T14:26:10Z")

</div>

Sorry for incomplete message.

My certificates are: I am trying to setup TCP SSL input, below is my configuration:

input {  
tcp {  
port =\> 9000  
host =\> "0.0.0.0"  
mode =\> "server"  
ssl\_enable =\> true  
ssl\_verify =\> false  
ssl\_extra\_chain\_certs =\> "/etc/ssl/cacert.crt"  
ssl\_cert =\> "/etc/ssl/logstashus.crt"  
ssl\_key =\> "/etc/ssl/logstashus.key"  
type =\> "syslog"  
tags =\> "syslog.imq.input"  
}  
}

Below is the process which I have followed to create certificates on Ubuntu:

openssl req -new -x509 -sha256 -extensions v3\_ca -keyout /etc/ssl/private/cakey.pem -out /etc/ssl/certs/cacert.pem -days 3650

openssl x509 -outform der -in /etc/ssl/certs/cacert.pem -out /etc/ssl/cacert.crt

openssl genrsa -out /etc/ssl/logstashus.key 2048

openssl req -new -key /etc/ssl/logstashus.key -out /etc/ssl/logstashus.csr -sha256

sudo openssl ca -in /etc/ssl/logstashus.csr -config /etc/ssl/openssl.cnf

copied output of: -----BEGIN CERTIFICATE----- to -----END CERTIFICATE----- into /etc/ssl/logstashus.crt file

Now I am getting below error message:

{:timestamp=\>"2016-08-24T14:07:27.761000+0000", :message=\>"Could not inititalize SSL context", :exception=\>#\<OpenSSL::X509::CertificateError: No message available\>, :backtrace=\>["org/jruby/ext/openssl/X509Cert.java:204:in `initialize'", "org/jruby/ext/openssl/X509Cert.java:181:in`initialize'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-input-tcp-3.0.6/lib/logstash/inputs/tcp.rb:213:in `ssl_context'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-input-tcp-3.0.6/lib/logstash/inputs/tcp.rb:250:in`new\_server\_socket'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-input-tcp-3.0.6/lib/logstash/inputs/tcp.rb:79:in `register'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-core-2.3.4-java/lib/logstash/pipeline.rb:330:in`start\_inputs'", "org/jruby/RubyArray.java:1613:in `each'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-core-2.3.4-java/lib/logstash/pipeline.rb:329:in`start\_inputs'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-core-2.3.4-java/lib/logstash/pipeline.rb:180:in `start_workers'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-core-2.3.4-java/lib/logstash/pipeline.rb:136:in`run'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-core-2.3.4-java/lib/logstash/agent.rb:473:in `start\_pipeline'"], :level=\>:error}

I am clueless as I have tried all possible configuration changes. My certificates are sha256WithRSAEncryption.

Please guide me.

---

<div class="post-metadata">

**Author:** ![jaykumar](https://avatars.discourse-cdn.com/v4/letter/j/439d5e/32.png) [@jaykumar](https://discuss.elastic.co/u/jaykumar)\
**Post date:** [August 25, 2016, 12:11pm UTC](https://discuss.elastic.co/t/logstash-tcp-ssl-certificate-error/58832/3 "2016-08-25T12:11:23Z")

</div>

I would appreciate if any expert could comment on this?

Regards,

Jay

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 4:41am UTC](https://discuss.elastic.co/t/logstash-tcp-ssl-certificate-error/58832/4 "2017-07-06T04:41:38Z")

</div>