I am facing a lot of issues to make my Forwarder work even after all steps supposedly followed. Have also been browsing and following tips from - https://github.com/elastic/logstash-forwarder/issues/221 but have not turned lucky yet.
The worst part is that, it has already taken much more time for me to make Forwarder work than it took me for complete setup of Logstash+Kiban+Elasticsearch all together...little sarcatic that is but true!
I've also been exploring the alternatives to logstash-forwarder but still found none that gets on-board fast and easy.
I am very keen to make my forwarder work out but not able to due to the ssl handshake issue.
Can any one help me with the possible reasons for my forwarder (on RHEL 6) not able to work with my Logstash server cert file and throwing the below error everytime?
2015/06/07 15:47:23.964418 Setting trusted CA from file: /usr/bin/mw_lumberjack.crt
2015/06/07 15:47:23.966107 Connecting to [10.51.167.10]:10010 (ukx01234.ab.dc-intl.com)
2015/06/07 15:47:23.971762 Failed to tls handshake with 10.51.167.10 x509: certificate is valid for , not ukx01234.ab.dc-intl.com
Pasting the config and cert details below.
Signature Algorithm: sha1WithRSAEncryption
Issuer: CN=.ab.dc-intl.com Validity Not Before: Jun 5 12:24:20 2015 GMT Not After : Jun 4 12:24:20 2016 GMT Subject: CN=.ab.dc-intl.com
Forwarder Config File:-
# A list of downstream servers listening for our messages.
# logstash-forwarder will pick one at random and only switch if
# the selected one appears to be dead or unresponsive
"servers": [ "ukx01234.ab.dc-intl.com:10010" ],
##"ssl certificate": "./logstash-forwarder.crt",
##"ssl key": "./logstash-forwarder.key",
"ssl ca": "/usr/bin/mw_lumberjack.crt",
I've already tried other options of mentioning the issuer's FQDN differently in the cert but NO luck.
Any help will be very appreciated and help me run the successful PoC.