# Logstash to Logstash communication issue with domain based SSL signed certification

**URL:** <https://discuss.elastic.co/t/logstash-to-logstash-communication-issue-with-domain-based-ssl-signed-certification/260796>\
**Category:** Logstash\
**Created:** [January 12, 2021, 8:34am UTC](https://discuss.elastic.co/t/logstash-to-logstash-communication-issue-with-domain-based-ssl-signed-certification/260796 "2021-01-12T08:34:55Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![alexbennet](https://avatars.discourse-cdn.com/v4/letter/a/db5fbb/32.png) [@alexbennet](https://discuss.elastic.co/u/alexbennet)\
**Post date:** [January 12, 2021, 8:34am UTC](https://discuss.elastic.co/t/logstash-to-logstash-communication-issue-with-domain-based-ssl-signed-certification/260796/1 "2021-01-12T08:34:55Z")

</div>

We are implementing application log monitoring on ELK flow from filebeat (logstash output) -\> on-prem logstash server(beats input & lumberjack output) -\> aws logstash server (beats input & elastic output) -\> elasticearch. The communication between on-prem logstash to aws logstash is ssl enabled and we are getting below error for certificate verification. We are using signed certificate with domain based on both lostash.

[2021-01-11T01:56:51,653][ERROR][logstash.outputs.lumberjack][onprem-nonpcf-filebeat] All hosts unavailable, sleeping {:hosts=\>["x.x.x.x"], :e=\>#\<OpenSSL::SSL::SSLError: certificate verify failed\>, :backtrace=\>["org/jruby/ext/openssl/SSLSocket.java:266:in `connect'", "/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/jls-lumberjack-0.0.26/lib/lumberjack/client.rb:95:in `connection\_start'", "/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/jls-lumberjack-0.0.26/lib/lumberjack/client.rb:76:in `initialize'", "/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/jls-lumberjack-0.0.26/lib/lumberjack/client.rb:34:in `connect'", "/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/jls-lumberjack-0.0.26/lib/lumberjack/client.rb:24:in `initialize'", "/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-lumberjack-3.1.7/lib/logstash/outputs/lumberjack.rb:86:in `connect'", "/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-lumberjack-3.1.7/lib/logstash/outputs/lumberjack.rb:49:in `register'", "org/logstash/config/ir/compiler/OutputStrategyExt.java:126:in `register'", "org/logstash/config/ir/compiler/AbstractOutputDelegatorExt.java:68:in `register'", "/usr/share/logstash/logstash-core/lib/logstash/java_pipeline.rb:216:in `block in register\_plugins'", "org/jruby/RubyArray.java:1809:in `each'", "/usr/share/logstash/logstash-core/lib/logstash/java_pipeline.rb:215:in `register\_plugins'", "/usr/share/logstash/logstash-core/lib/logstash/java\_pipeline.rb:520:in `maybe_setup_out_plugins'", "/usr/share/logstash/logstash-core/lib/logstash/java_pipeline.rb:228:in `start\_workers'", "/usr/share/logstash/logstash-core/lib/logstash/java\_pipeline.rb:170:in `run'", "/usr/share/logstash/logstash-core/lib/logstash/java_pipeline.rb:125:in `block in start'"]}

On-prem Logstash output Configuration:

lumberjack {  
id =\> "onprem-l1"  
codec =\> "json"  
port =\> 5045  
hosts =\> ["[awslogstash.prod.domain.com](http://awslogstash.prod.domain.com)"] #domain name renamed  
ssl\_certificate =\> "/etc/logstash/certs/ca. crt" # which contains root ca and intermedia certificate  
}

We tried configuring domain certificate, root ca certificate, intermediate certificate on ssl\_certificate option with seprate and combined but getting same validation error.

AWS Logstash input configuration:

input {  
beats {  
host =\> " [awslogstash.prod.domain.com](http://awslogstash.prod.domain.com)"  
port =\> 5045  
ssl =\> true  
ssl\_certificate =\> "/etc/logstash/certs/ awslogstash.prod.domain.com.crt"  
ssl\_key =\> "/etc/logstash/certs/all-nodes.pkcs8.key"  
ssl\_certificate\_authorities =\> ["/etc/logstash/certs/ca.crt"]  
ssl\_verify\_mode =\> "peer"  
}  
}

Please let me know what I am missing.

Thanks,  
Alex

---

<div class="post-metadata">

**Author:** ![alexbennet](https://avatars.discourse-cdn.com/v4/letter/a/db5fbb/32.png) [@alexbennet](https://discuss.elastic.co/u/alexbennet)\
**Post date:** [January 25, 2021, 3:09pm UTC](https://discuss.elastic.co/t/logstash-to-logstash-communication-issue-with-domain-based-ssl-signed-certification/260796/2 "2021-01-25T15:09:16Z")

</div>

I solved this issue by merging domain, root ca and intermediate certificate into single certificate on destination logstash and its established connection.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [February 22, 2021, 3:09pm UTC](https://discuss.elastic.co/t/logstash-to-logstash-communication-issue-with-domain-based-ssl-signed-certification/260796/3 "2021-02-22T15:09:25Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.