the issue in the link is marked as closed due to inactivity, but I am still having this issue - curl error 77 when doing a fresh elasticsearch 8.4 install (see link above). Below is a workaround.
Any updates on this issue? Below is what I was able to achieve with copying the http_ca.crt
into /usr/local/share/ca-certificates/certs/ then ln -s
to /etc/ssl/certs
when I copy and link cert :
cp /etc/elasticsearch/certs/http_ca.crt /usr/local/share/ca-certificates/certs/http_ca.crt
chmod 640 /usr/local/share/ca-certificates/certs/http_ca.crt
c_rehash /usr/local/share/ca-certificates/certs/
cd /etc/ssl/certs
ln -s /usr/local/share/ca-certificates/http_ca.crt http_ca.crt
chmod 640 /etc/ssl/certs/http_ca.crt
c_rehash
NOTE: ownership is already set to root:root on /etc/ssl/certs/http_ca.crt
then run curl cmd:
curl --cacert /etc/ssl/certs/http_ca.crt -u elastic https://localhost:9200/
I get the desired results; ES summary data.
curl --cacert /etc/elasticsearch/certs/http_ca.crt -u elastic https://localhost:9200/
continues to generate the curl 77 error mentioned in the original post. Even after this change.
I am guessing/hoping that I can update the elasticsearch.yml
to point to the cert in /etc/ssl/certs
and everything will work without issue. Until there is an update that could break that connection.
I am using ubuntu server 20.04 LTS // ES 8.4