Problem accessing trust store

Elastic Stack Logstash
1

Hi All,

I was trying out the Logstash by following the steps at the below link.
https://www.elastic.co/guide/en/beats/libbeat/5.5/logstash-installation.html

I'm using the same configuration mentioned there as shown below.

input {
  beats {
    port => 5044
  }
}


output {
  elasticsearch {
    hosts => "localhost:9200"
    manage_template => false
    index => "%{[@metadata][beat]}-%{+YYYY.MM.dd}" 
    document_type => "%{[@metadata][type]}" 
  }
}

When I start the Logstash service I get the below errors.

I'm trying this on RHEL 7.2 with openjdk-"1.8.0_131".

Has anyone else seen this erorr? Why is it trying to access trust store when I haven't mentioned SSL in the configuration file?

[2017-07-13T21:27:59,727][ERROR][logstash.pipeline        ] Error registering plugin {:plugin=>"#<LogStash::OutputDelegator:0x45fb46dc @namespaced_metric=#<LogStash::Instrument::NamespacedMetric:0x6a0e6d2f @metric=#<LogStash::Instrument::Metric:0x510e98cd @collector=#<LogStash::Instrument::Collector:0x1e88a3eb @agent=nil, @metric_store=#<LogStash::Instrument::MetricStore:0x15adb40 @store=#<Concurrent::Map:0x00000000061fac entries=3 default_proc=nil>, @structured_lookup_mutex=#<Mutex:0x18a4b951>, @fast_lookup=#<Concurrent::Map:0x00000000061fb0 entries=58 default_proc=nil>>>>, @namespace_name=[:stats, :pipelines, :main, :plugins, :outputs, :\"7d4f03589e00f50d8661ca2fe4d44c7268730f19-2\"]>, @metric=#<LogStash::Instrument::NamespacedMetric:0x6685f9d1 @metric=#<LogStash::Instrument::Metric:0x510e98cd @collector=#<LogStash::Instrument::Collector:0x1e88a3eb @agent=nil, @metric_store=#<LogStash::Instrument::MetricStore:0x15adb40 @store=#<Concurrent::Map:0x00000000061fac entries=3 default_proc=nil>, @structured_lookup_mutex=#<Mutex:0x18a4b951>, @fast_lookup=#<Concurrent::Map:0x00000000061fb0 entries=58 default_proc=nil>>>>, @namespace_name=[:stats, :pipelines, :main, :plugins, :outputs]>, @logger=#<LogStash::Logging::Logger:0xc01f7d0 @logger=#<Java::OrgApacheLoggingLog4jCore::Logger:0x733a1bc9>>, @strategy=#<LogStash::OutputDelegatorStrategies::Shared:0x34284b6f @output=<LogStash::Outputs::ElasticSearch hosts=>[//localhost:9200], manage_template=>false, index=>\"%{[@metadata][beat]}-%{+YYYY.MM.dd}\", document_type=>\"%{[@metadata][type]}\", id=>\"7d4f03589e00f50d8661ca2fe4d44c7268730f19-2\", enable_metric=>true, codec=><LogStash::Codecs::Plain id=>\"plain_dccbc86b-9e5c-45fd-8cfc-35cdc99fa961\", enable_metric=>true, charset=>\"UTF-8\">, workers=>1, template_name=>\"logstash\", template_overwrite=>false, idle_flush_time=>1, @structured_lookup_mutex=#<Mutex:0x18a4b951>, @fast_lookup=#<Concurrent::Map:0x00000000061fb0 entries=58 default_proc=nil>>>>, @namespace_name=[:stats, :pipelines, :main, :plugins, :outputs, :\"7d4f03589e00f50d8661ca2fe4d44c7268730f19-2\", :events]>, @output_class=LogStash::Outputs::ElasticSearch>", :error=>"problem accessing trust storejava.io.IOException: DER length more than 4 bytes: 109"}
[2017-07-13T21:27:59,746][ERROR][logstash.agent           ] Pipeline aborted due to error {:exception=>java.security.KeyStoreException: problem accessing trust storejava.io.IOException: DER length more than 4 bytes: 109, :backtrace=>["sun.security.ssl.TrustManagerFactoryImpl.engineInit(sun/security/ssl/TrustManagerFactoryImpl.java:74)", "javax.net.ssl.TrustManagerFactory.init(javax/net/ssl/TrustManagerFactory.java:250)", "org.apache.http.conn.ssl.SSLContextBuilder.loadTrustMaterial(org/apache/http/conn/ssl/SSLContextBuilder.java:106)", "java.lang.reflect.Method.invoke(java/lang/reflect/Method.java:498)", "RUBY.setup_trust_store(/usr/share/logstash/vendor/bundle/jruby/1.9/gems/manticore-0.6.1-java/lib/manticore/client.rb:638)", "RUBY.ssl_socket_factory_from_options(/usr/share/logstash/vendor/bundle/jruby/1.9/gems/manticore-0.6.1-java/lib/manticore/client.rb:618)", "RUBY.pool_builder(/usr/share/logstash/vendor/bundle/jruby/1.9/gems/manticore-0.6.1-java/lib/manticore/client.rb:394)", "RUBY.pool(/usr/share/logstash/vendor/bundle/jruby/1.9/gems/manticore-0.6.1-java/lib/manticore/client.rb:402)", "RUBY.initialize(/usr/share/logstash/vendor/bundle/jruby/1.9/gems/manticore-0.6.1-java/lib/manticore/client.rb:208)", "RUBY.initialize(/usr/share/logstash/vendor/bundle/jruby/1.9/gems/logstash-output-elasticsearch-7.3.6-java/lib/logstash/outputs/elasticsearch/http_client/manticore_adapter.rb:26)", "RUBY.build_adapter(/usr/share/logstash/vendor/bundle/jruby/1.9/gems/logstash-output-elasticsearch-7.3.6-java/lib/logstash/outputs/elasticsearch/http_client.rb:265)", "RUBY.build_pool(/usr/share/logstash/vendor/bundle/jruby/1.9/gems/logstash-output-elasticsearch-7.3.6-java/lib/logstash/outputs/elasticsearch/http_client.rb:269)", "RUBY.initialize(/usr/share/logstash/vendor/bundle/jruby/1.9/gems/logstash-output-elasticsearch-7.3.6-java/lib/logstash/outputs/elasticsearch/http_client.rb:60)", "RUBY.create_http_client(/usr/share/logstash/vendor/bundle/jruby/1.9/gems/logstash-output-elasticsearch-7.3.6-java/lib/logstash/outputs/elasticsearch/http_client_builder.rb:101)", "RUBY.build(/usr/share/logstash/vendor/bundle/jruby/1.9/gems/logstash-output-elasticsearch-7.3.6-java/lib/logstash/outputs/elasticsearch/http_client_builder.rb:97)", "RUBY.build_client(/usr/share/logstash/vendor/bundle/jruby/1.9/gems/logstash-output-elasticsearch-7.3.6-java/lib/logstash/outputs/elasticsearch.rb:230)", "RUBY.register(/usr/share/logstash/vendor/bundle/jruby/1.9/gems/logstash-output-elasticsearch-7.3.6-java/lib/logstash/outputs/elasticsearch/common.rb:28)", "RUBY.register(/usr/share/logstash/logstash-core/lib/logstash/output_delegator_strategies/shared.rb:9)", "RUBY.register(/usr/share/logstash/logstash-core/lib/logstash/output_delegator.rb:41)", "RUBY.register_plugin(/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:281)", "RUBY.register_plugins(/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:292)", "org.jruby.RubyArray.each(org/jruby/RubyArray.java:1613)", "RUBY.register_plugins(/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:292)", "RUBY.start_workers(/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:301)", "RUBY.run(/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:226)", "RUBY.start_pipeline(/usr/share/logstash/logstash-core/lib/logstash/agent.rb:398)", "java.lang.Thread.run(java/lang/Thread.java:748)"]}
[2017-07-13T21:27:59,799][INFO ][logstash.agent           ] Successfully started Logstash API endpoint {:port=>9600}
[2017-07-13T21:28:02,769][WARN ][logstash.agent           ] stopping pipeline {:id=>"main"}
2

Guys,

Can you please help?
I'm surprised nobody here has run into this. I've used the same configuration as mentioned in the Losgstash Reference page.

3

Thanks @TimV for your reply here ElasticsearchException: could not initialize mac.

Replacing my java.security file with the default values fixed the issue. I had bouncy castle security provider configured in my server.

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.