Python SSL Error

Elastic Stack Elasticsearch
1

I am trying to use the following code

import elasticsearch

es = elasticsearch.Elasticsearch(es_protocol+'://'+es_host+':'+es_port,http_auth=(_user,_pass),verify_certs=None)

es.indices.create(index=index_name, ignore=400)

return 1;

However I get an error

Error: 0: pyembed: ConnectionError([SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:618)) caused by: SSLError([SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:618))

Its a self signed certificate hence the verify_certs is set to none. Any ideas what might be the issue?

2

You need to set verify_certs to False if you want to disable verification.

3

I have tried that as well. Still the same error!

4

My latest combo is

es = elasticsearch.Elasticsearch([es_host+':'+es_port],http_auth=(_user,_pass),use_ssl=True,verify_certs=False,ssl_show_warn=False)

5

Anyone?

6

Bump

7

For the sake of everyone verify_certs is deprecated, I got this to work using this link https://github.com/elastic/elasticsearch-py/issues/712

8

@adwaitjoshi it would be good practice to set up a CA, or simply get a free SSL certificate from a widely supported CA if you own a domain name.

9

All of our machines are off the internet and communicate over private IPs.

10

@adwaitjoshi it sounds like you're saying you don't need authentication. If that is really the case, then why do you need encryption?

11

I did not say I dont need authentication. What I said was a "self signed certificate" serves our purpose because our IPs are private and machines are private.

12

You can use this piece of code to connect to your index via your python code.

es =  Elasticsearch([myHost], http_auth=(username, password))
if not es.indices.exists(index=myIndex):
	es.indices.create(index=myIndex, body=myIndexMap)
res = es.index(index=myIndex,doc_type='_doc', body=dictionary)
1 Like
13

My mistake. I tend to regard self-signed certificate as being as good as no authentication, but that isn't actually true!

14

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.