# Secure ELK Stack with cloudflare wildcard SSL Failing on an ubuntu setup
**URL:** https://discuss.elastic.co/t/secure-elk-stack-with-cloudflare-wildcard-ssl-failing-on-an-ubuntu-setup/349597
**Category:** Elasticsearch
**Created:** [December 18, 2023, 8:58pm UTC](https://discuss.elastic.co/t/secure-elk-stack-with-cloudflare-wildcard-ssl-failing-on-an-ubuntu-setup/349597 "2023-12-18T20:58:57Z")
**Posts on this page:** 2
**Page:** 1
### Author:  [@gurungo\_lovemore](https://discuss.elastic.co/u/gurungo_lovemore)
#### Post date: [December 18, 2023, 8:58pm UTC](https://discuss.elastic.co/t/secure-elk-stack-with-cloudflare-wildcard-ssl-failing-on-an-ubuntu-setup/349597/1 "2023-12-18T20:58:57Z")
I have a cloudflare wildcard ssl for my organization that i have configured on my elasticsearch and Kibana as follows:
'''''''''
Elasticsearch
```auto
# Enable security features
xpack.security.enabled: true
xpack.security.enrollment.enabled: true
# Enable encryption for HTTP API client connections, such as Kibana, Logstash, and Agents
xpack.security.http.ssl:
enabled: true
key: certs/elk_elula/cf_privkey.pem
certificate: certs/elk_elula/cf_fullchain.pem
verification_mode: certificate
certificate_authorities: ["/etc/elasticsearch/certs/elk_elula/cf_fullchain.pem"]
# Enable encryption and mutual authentication between cluster nodes
xpack.security.transport.ssl:
enabled: true
key: certs/elk_elula/cf_privkey.pem
certificate: certs/elk_elula/cf_fullchain.pem
verification_mode: certificate
certificate_authorities: ["/etc/elasticsearch/certs/elk_elula/cf_fullchain.pem"]
```
Kibana:
''''''''
```auto
# =================== System: Kibana Server (Optional) ===================
# Enables SSL and paths to the PEM-format SSL certificate and SSL key files, respectively.
# These settings enable SSL for outgoing requests from the Kibana server to the browser.
server.ssl.enabled: true
server.ssl.certificate: /etc/kibana/certs/kibana.elula.cloud/cf_fullchain.pem
server.ssl.key: /etc/kibana/certs/kibana.elula.cloud/cf_privkey.pem
server.ssl.certificateAuthorities: ["/etc/kibana/certs/kibana/cf_fullchain.pem"]
server.ssl.verification_mode: certificate
```
and its not working, when i curl i get this
''''''''
curl
curl: (60) SSL certificate problem: unable to get local issuer certificate
More details here:
'''''''
curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.
I have tried adding the RSA Cloudflare Root CA and ECC root CA with no joy
please help, been at it for many days
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [January 15, 2024, 8:59pm UTC](https://discuss.elastic.co/t/secure-elk-stack-with-cloudflare-wildcard-ssl-failing-on-an-ubuntu-setup/349597/2 "2024-01-15T20:59:07Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.