# No name matching kunboy5240.tk found

**URL:** <https://discuss.elastic.co/t/no-name-matching-kunboy5240-tk-found/318103>\
**Category:** Elasticsearch\
**Tags:** elastic-stack-security\
**Created:** [November 3, 2022, 11:11am UTC](https://discuss.elastic.co/t/no-name-matching-kunboy5240-tk-found/318103 "2022-11-03T11:11:49Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![a8840072](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/a8840072/32/112900_2.png) [@a8840072](https://discuss.elastic.co/u/a8840072)\
**Post date:** [November 3, 2022, 11:11am UTC](https://discuss.elastic.co/t/no-name-matching-kunboy5240-tk-found/318103/1 "2022-11-03T11:11:49Z")

</div>

I have configured the ssl certificate for my es, but when I want to reset the password, this exception occurs. I am sure that the" **kunboy5240.tk**" in the url I entered is my domain name used to generate the certificate , why is such an exception reported:

```auto
org.elasticsearch.common.ssl.DiagnosticTrustManager - failed to establish trust with server at [kunboy5240.tk]; the server provided a certificate with subject name [CN=instance], fingerprint [6d09b19661cf05f7c93c2cde2b02e824582e974b], no keyUsage and no extendedKeyUsage; the session uses cipher suite [TLS_AES_256_GCM_SHA384] and protocol [TLSv1.3]; the certificate does not have any subject alternative names; the certificate is issued by [CN=Elastic Certificate Tool Autogenerated CA]; the certificate is signed by (subject [CN=Elastic Certificate Tool Autogenerated CA] fingerprint [f77c65e09106ec599b9524d8a90d15237d33db83] {trusted issuer}) which is self-issued; the [CN=Elastic Certificate Tool Autogenerated CA] certificate is trusted in this ssl context ([xpack .security.http.ssl (with trust configuration: StoreTrustConfig{path=certs/elastic-certificates.p12, password=<non-empty>, type=PKCS12, algorithm=PKIX})])

```

---

<div class="post-metadata">

**Author:** ![Yang\_Wang](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yang_wang/32/48857_2.png) [@Yang\_Wang](https://discuss.elastic.co/u/Yang_Wang)\
**Post date:** [November 7, 2022, 1:12am UTC](https://discuss.elastic.co/t/no-name-matching-kunboy5240-tk-found/318103/2 "2022-11-07T01:12:22Z")

</div>

Can you share the relevant configuration from `elasticsearch.yml` file? My guess is that you have

```auto
xpack.security.transport.ssl.verification_mode: full

```

while it should be

```auto
xpack.security.transport.ssl.verification_mode: certificate

```

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 5, 2022, 1:12am UTC](https://discuss.elastic.co/t/no-name-matching-kunboy5240-tk-found/318103/3 "2022-12-05T01:12:37Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
