@JasonStoltz @orhantoy finally I was able resolve this issue.
The reason for the issue was nginx reverse proxy, I moved the both elasticsearch and app search to same machine and connected app-search to elasticsearch directly, https://localhost:9200
This configuration worked:
elasticsearch.host: " https://127.0.0.1:9200"
elasticsearch.ssl.enabled: true
elasticsearch.ssl.certificate_authority: "{{ ssl_certs_dir_path }}/ca.crt"
elasticsearch.ssl.verify: true
I think the bug here is, when using elasticsearch.ssl.verfiy= false
, app search was still verifying server public certificate using default trust store of java. I made elasticsearch.ssl.verfiy= true
pointing to the CA and it worked; I described the issue here: App search not able to connect to elasticsearch directly over https.
I spent lot of time on this, @orhantoy @JasonStoltz thanks for your help.