# Mutual tls/ssl on elasticsearch

**URL:** <https://discuss.elastic.co/t/mutual-tls-ssl-on-elasticsearch/197768>\
**Category:** Elasticsearch\
**Tags:** elastic-stack-security\
**Created:** [September 3, 2019, 6:57am UTC](https://discuss.elastic.co/t/mutual-tls-ssl-on-elasticsearch/197768 "2019-09-03T06:57:14Z")\
**Posts on this page:** 6\
**Page:** 2

<div class="post-metadata">

**Author:** ![SukeshGupta](https://avatars.discourse-cdn.com/v4/letter/s/91b2a8/32.png) [@SukeshGupta](https://discuss.elastic.co/u/SukeshGupta)\
**Post date:** [September 10, 2019, 4:54am UTC](https://discuss.elastic.co/t/mutual-tls-ssl-on-elasticsearch/197768/21 "2019-09-10T04:54:03Z")

</div>

> [@ikakavas](#):
>
> The error says "Empty server certificate chain" but this "server" part is misleadi

Yes its misleading !  
@ikakavas Is there any way to find root cause for this. Thanks!

---

<div class="post-metadata">

**Author:** ![ikakavas](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ikakavas/32/34430_2.png) [@ikakavas](https://discuss.elastic.co/u/ikakavas)\
**Post date:** [September 10, 2019, 6:44am UTC](https://discuss.elastic.co/t/mutual-tls-ssl-on-elasticsearch/197768/22 "2019-09-10T06:44:30Z")

</div>

> [@SukeshGupta](#):
>
> Is there any way to find root cause for this.

Yes, find out what runs on `192.168.0.13` and connects to elasticsearch without client authentication.

---

<div class="post-metadata">

**Author:** ![SukeshGupta](https://avatars.discourse-cdn.com/v4/letter/s/91b2a8/32.png) [@SukeshGupta](https://discuss.elastic.co/u/SukeshGupta)\
**Post date:** [September 10, 2019, 9:30am UTC](https://discuss.elastic.co/t/mutual-tls-ssl-on-elasticsearch/197768/23 "2019-09-10T09:30:59Z")

</div>

Hi @ikakavas,

Can you please tell how to check as I am not clear how to check what is connecting to ES. Thanks!

---

<div class="post-metadata">

**Author:** ![ikakavas](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ikakavas/32/34430_2.png) [@ikakavas](https://discuss.elastic.co/u/ikakavas)\
**Post date:** [September 10, 2019, 9:35am UTC](https://discuss.elastic.co/t/mutual-tls-ssl-on-elasticsearch/197768/24 "2019-09-10T09:35:11Z")

</div>

Apologies, but this is your server in your environment. I can't even start to guess what might be running there , let alone what connects to elasticsearch, if you don't know 🙂

You need to figure this out yourself, or with the help of some colleague in your organization. Find the server that runs on that IP address, log in there, see what processes are running , what software is installed there and then try and determine if something from that list could be attempting to connect to your elasticsearch node.

---

<div class="post-metadata">

**Author:** ![SukeshGupta](https://avatars.discourse-cdn.com/v4/letter/s/91b2a8/32.png) [@SukeshGupta](https://discuss.elastic.co/u/SukeshGupta)\
**Post date:** [September 10, 2019, 9:37am UTC](https://discuss.elastic.co/t/mutual-tls-ssl-on-elasticsearch/197768/25 "2019-09-10T09:37:43Z")

</div>

Okay @ikakavas. Thanks for the quick reply.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 8, 2019, 9:37am UTC](https://discuss.elastic.co/t/mutual-tls-ssl-on-elasticsearch/197768/26 "2019-10-08T09:37:53Z")

</div>

Closed on October 8, 2019, 9:37am UTC

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.

[Previous page](https://discuss.elastic.co/t/mutual-tls-ssl-on-elasticsearch/197768.md?page=1)