# Output elascticsearch ( no ssl ) behind nginx SSL

**URL:** <https://discuss.elastic.co/t/output-elascticsearch-no-ssl-behind-nginx-ssl/48418>\
**Category:** Logstash\
**Created:** [April 26, 2016, 11:36am UTC](https://discuss.elastic.co/t/output-elascticsearch-no-ssl-behind-nginx-ssl/48418 "2016-04-26T11:36:06Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![kib](https://avatars.discourse-cdn.com/v4/letter/k/7ba0ec/32.png) [@kib](https://discuss.elastic.co/u/kib)\
**Post date:** [April 26, 2016, 11:36am UTC](https://discuss.elastic.co/t/output-elascticsearch-no-ssl-behind-nginx-ssl/48418/1 "2016-04-26T11:36:06Z")

</div>

hi,  
i 'm using elasticsearch 2.3.1 and logstash 2.3.1-1 from rpm under rh es 5.5

1/ server data  
nginx SSL=\> elasticsearch 9200 ( without auth or ssl )

2/ client logstash crash

> curl [https://xxx.xxx.xxx.xxx](https://xxx.xxx.xxx.xxx) -k  
> {  
> "name" : "srv1",  
> "cluster\_name" : "elasticsearch",  
> "version" : {  
> "number" : "2.3.1",  
> "build\_hash" : "bd980929010aef404e7cb0843e61d0665269fc39",  
> "build\_timestamp" : "2016-04-04T12:25:05Z",  
> "build\_snapshot" : false,  
> "lucene\_version" : "5.5.0"  
> },  
> "tagline" : "You Know, for Search"  
> }

logstash is parsing apache log and send data to another machine with nginx-SSL+elasticsearch-NOSSL  
but i there is

output {  
elasticsearch {  
hosts =\> "xxx.xxx.xxx.xxx:443"  
ssl =\> true  
}  
stdout { codec =\> rubydebug }  
}

/opt/logstash/bin/logstash -f /etc/logstash/conf.d/apache1.conf

===\> error with

> stopping pipeline {:id=\>"main"}  
> Attempted to send a bulk request to Elasticsearch configured at '["[https://xxx.xxx.xxx.xxx/](https://xxx.xxx.xxx.xxx/)"]', but an error occurred and it failed! Are you sure you can reach elasticsearch from this machine using the configuration provided? {:error\_message=\>"PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target", :error\_class=\>"Manticore::ClientProtocolException", :backtrace=\>["/opt/logstash/vendor/bundle/jruby/1.9/gems/manticore-0.5.5-java/lib/manticore/response.rb:37:in `initialize'", "org/jruby/RubyProc.java:281:in `call'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/manticore-0.5.5-java/lib/manticore/response.rb:79:in `call'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/manticore-0.5.5-java/lib/manticore/response.rb:256:in `call\_once'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/manticore-0.5.5-java/lib/manticore/response.rb:153:in `code'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/elasticsearch-transport-1.0.15/lib/elasticsearch/transport/transport/http/manticore.rb:71:in `perform\_request'", "org/jruby/RubyProc.java:281:in ---------

`bulk'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-output-elasticsearch-2.5.5-java/lib/logstash/outputs/elasticsearch/http_client.rb:53:in `non\_threadsafe\_bulk'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-output-elasticsearch-2.5.5-java/lib/logstash/outputs/elasticsearch/http\_client.rb:38:in `bulk'", "org/jruby/ext/thread/Mutex.java:149:in `synchronize'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-output-elasticsearch-2.5.5-java/lib/logstash/outputs/elasticsearch/http\_client.rb:38:in `bulk'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-output-elasticsearch-2.5.5-java/lib/logstash/outputs/elasticsearch/common.rb:163:in `safe\_bulk'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-output-elasticsearch-2.5.5-java/lib/logstash/outputs/elasticsearch/common.rb:101:in `submit'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-output-elasticsearch-2.5.5-java/lib/logstash/outputs/elasticsearch/common.rb:86:in `retrying\_submit'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-output-elasticsearch-2.5.5-java/lib/logstash/outputs/elasticsearch/common.rb:29:in `multi_receive'", "org/jruby/RubyArray.java:1653:in `each\_slice'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-output-elasticsearch-2.5.5-java/lib/logstash/outputs/elasticsearch/common.rb:28:in `multi_receive'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-core-2.3.1-java/lib/logstash/output_delegator.rb:130:in `worker\_multi\_receive'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-core-2.3.1-java/lib/logstash/output\_delegator.rb:114:in `multi_receive'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-core-2.3.1-java/lib/logstash/pipeline.rb:301:in `output\_batch'", "org/jruby/RubyHash.java:1342:in `each'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-core-2.3.1-java/lib/logstash/pipeline.rb:301:in `output\_batch'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-core-2.3.1-java/lib/logstash/pipeline.rb:232:in `worker_loop'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-core-2.3.1-java/lib/logstash/pipeline.rb:201:in `start\_workers'"], :client\_config=\>{:hosts=\>["[https://xxx.xxx.xxx.xxx/](https://xxx.xxx.xxx.xxx/)"], :ssl=\>nil, :transport\_options=\>{:socket\_timeout=\>0, :request\_timeout=\>0, :proxy=\>nil, :ssl=\>{}}, :transport\_class=\>Elasticsearch::Transport::Transport::HTTP::Manticore, :logger=\>nil, :tracer=\>nil, :reload\_connections=\>false, :retry\_on\_failure=\>false, :reload\_on\_failure=\>false, :randomize\_hosts=\>false}, :level=\>:error}

---

<div class="post-metadata">

**Author:** ![mnhan](https://avatars.discourse-cdn.com/v4/letter/m/8baadc/32.png) [@mnhan](https://discuss.elastic.co/u/mnhan)\
**Post date:** [April 27, 2016, 5:52pm UTC](https://discuss.elastic.co/t/output-elascticsearch-no-ssl-behind-nginx-ssl/48418/2 "2016-04-27T17:52:46Z")

</div>

not sure what your question is? you told logstash to output to ES via https setting "ssl=\>true" . You didn't specify cacerts so it was able to find a valid certification path if I'm not misreading this error message

> sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested targe

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 5:00am UTC](https://discuss.elastic.co/t/output-elascticsearch-no-ssl-behind-nginx-ssl/48418/3 "2017-07-06T05:00:16Z")

</div>


