# SSL KeyStoreException on X-Pack 5.1.1 installation (RHEL)

**URL:** <https://discuss.elastic.co/t/ssl-keystoreexception-on-x-pack-5-1-1-installation-rhel/70611>\
**Category:** Elasticsearch\
**Created:** [January 4, 2017, 9:01pm UTC](https://discuss.elastic.co/t/ssl-keystoreexception-on-x-pack-5-1-1-installation-rhel/70611 "2017-01-04T21:01:04Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![jasonkylemorse](https://avatars.discourse-cdn.com/v4/letter/j/41988e/32.png) [@jasonkylemorse](https://discuss.elastic.co/u/jasonkylemorse)\
**Post date:** [January 4, 2017, 9:01pm UTC](https://discuss.elastic.co/t/ssl-keystoreexception-on-x-pack-5-1-1-installation-rhel/70611/1 "2017-01-04T21:01:04Z")

</div>

I have a development cluster made up of 3 nodes. I installed Elasticsearch 5.1.1 on all 3, and Kibana 5.1.1 on just the first one. Installing X-Pack for ES and Kibana on node 1 worked fine and the services started back up again. I managed to hit the login screen and successfully authenticated with the default credentials.

However, the ES service fails to start on the other 2 nodes. I'm seeing:

`org.elasticsearch.bootstrap.StartupException: ElasticsearchException[Failed to load plugin class [org.elasticsearch.xpack.XPackPlugin]]; nested: InvocationTargetException; nested: ElasticsearchException[failed to initialize a TrustManagerFactory]; nested: KeyStoreException[problem accessing trust storejava.io.IOException: Invalid keystore format];`  
...  
`Caused by: org.elasticsearch.ElasticsearchException: failed to initialize a TrustManagerFactory`  
...  
`Caused by: java.security.KeyStoreException: problem accessing trust storejava.io.IOException: Invalid keystore format`

The only mention of any SSL in my configurations thus far is in kibana.yml where I set `server.ssl.cert` and `server.ssl.key` for outgoing nginx requests. Not sure where these errors are originating from since this is a fresh install.

Any help is appreciated. Thanks!

---

<div class="post-metadata">

**Author:** ![jaymode](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jaymode/32/50103_2.png) [@jaymode](https://discuss.elastic.co/u/jaymode)\
**Post date:** [January 4, 2017, 9:17pm UTC](https://discuss.elastic.co/t/ssl-keystoreexception-on-x-pack-5-1-1-installation-rhel/70611/2 "2017-01-04T21:17:00Z")

</div>

What Java version are you using?

---

<div class="post-metadata">

**Author:** ![jasonkylemorse](https://avatars.discourse-cdn.com/v4/letter/j/41988e/32.png) [@jasonkylemorse](https://discuss.elastic.co/u/jasonkylemorse)\
**Post date:** [January 4, 2017, 9:19pm UTC](https://discuss.elastic.co/t/ssl-keystoreexception-on-x-pack-5-1-1-installation-rhel/70611/3 "2017-01-04T21:19:37Z")

</div>

Version 1.8.0\_45

---

<div class="post-metadata">

**Author:** ![jaymode](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jaymode/32/50103_2.png) [@jaymode](https://discuss.elastic.co/u/jaymode)\
**Post date:** [January 4, 2017, 9:31pm UTC](https://discuss.elastic.co/t/ssl-keystoreexception-on-x-pack-5-1-1-installation-rhel/70611/4 "2017-01-04T21:31:52Z")

</div>

Is this oracle or openjdk? Can you try a newer oracle jdk?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [February 1, 2017, 9:31pm UTC](https://discuss.elastic.co/t/ssl-keystoreexception-on-x-pack-5-1-1-installation-rhel/70611/5 "2017-02-01T21:31:57Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.