# SSL verification mode

**URL:** https://discuss.elastic.co/t/ssl-verification-mode/246964
**Category:** Вопросы на русском языке
**Created:** [August 31, 2020, 2:00pm UTC](https://discuss.elastic.co/t/ssl-verification-mode/246964 "2020-08-31T14:00:33Z")
**Posts on this page:** 8
**Page:** 1

<div class="post-metadata">

### Author: ![Boom](https://avatars.discourse-cdn.com/v4/letter/b/c4cdca/32.png) [@Boom](https://discuss.elastic.co/u/Boom)
#### Post date: [August 31, 2020, 2:00pm UTC](https://discuss.elastic.co/t/ssl-verification-mode/246964/1 "2020-08-31T14:00:33Z")

</div>

Добрый день,  
Я не могу запустить службу winlogbeat на win\_server 2016  
После команды:  
. \ winlogbeat.exe -c winlogbeat.yml -e -v -d "\*"  
У меня ошибка: certificate signed by unknown authority  
Я пытаюсь добавить метод ssl.verification\_mode: none, но он не действует.  
Этот метод должен быть в output.elasticsearch? Или в каком блоке?

Спасибо за ответ

---

<div class="post-metadata">

### Author: ![Igor\_Motov](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/igor_motov/32/45193_2.png) [@Igor\_Motov](https://discuss.elastic.co/u/Igor_Motov)
#### Post date: [August 31, 2020, 3:21pm UTC](https://discuss.elastic.co/t/ssl-verification-mode/246964/2 "2020-08-31T15:21:16Z")

</div>

Как config выглядит? Куда `ssl.verification_mode: none` добавляли?

---

<div class="post-metadata">

### Author: ![Boom](https://avatars.discourse-cdn.com/v4/letter/b/c4cdca/32.png) [@Boom](https://discuss.elastic.co/u/Boom)
#### Post date: [August 31, 2020, 5:49pm UTC](https://discuss.elastic.co/t/ssl-verification-mode/246964/3 "2020-08-31T17:49:51Z")

</div>

output.elasticsearch:

# Array of hosts to connect to.

hosts: ["[https://172.30.6.184:9200](https://172.30.6.184:9200)"]  
ssl.verification\_mode: "none"

---

<div class="post-metadata">

### Author: ![Igor\_Motov](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/igor_motov/32/45193_2.png) [@Igor\_Motov](https://discuss.elastic.co/u/Igor_Motov)
#### Post date: [August 31, 2020, 6:19pm UTC](https://discuss.elastic.co/t/ssl-verification-mode/246964/4 "2020-08-31T18:19:38Z")

</div>

Так?

```auto
output.elasticsearch:
  # Array of hosts to connect to.
  hosts: ["https://172.30.6.184:9200"]
  ssl.verification_mode: "none"

```

И это весь конфиг? В нем больше секций output, elasticsearch и ssl нигде нет и он точно так отформатирован с 2-мя пробелами?

---

<div class="post-metadata">

### Author: ![Boom](https://avatars.discourse-cdn.com/v4/letter/b/c4cdca/32.png) [@Boom](https://discuss.elastic.co/u/Boom)
#### Post date: [September 1, 2020, 6:36am UTC](https://discuss.elastic.co/t/ssl-verification-mode/246964/5 "2020-09-01T06:36:57Z")

</div>

Да, так  
С двумя пробелами

```auto
# ---------------------------- Elasticsearch Output ----------------------------
output.elasticsearch:
  # Array of hosts to connect to.
  hosts: ["https://ip_address:9200"]
  ssl.verification_mode: "none"

  # Protocol - either `http` (default) or `https`.
  #protocol: "https"

  # Authentication credentials - either API key or username/password.
  #api_key: "id:api_key"
  #username: "elastic"
  #password: "password"
  

```

Нужно добавлять еще конфиг для ssl ?

---

<div class="post-metadata">

### Author: ![Igor\_Motov](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/igor_motov/32/45193_2.png) [@Igor\_Motov](https://discuss.elastic.co/u/Igor_Motov)
#### Post date: [September 1, 2020, 5:58pm UTC](https://discuss.elastic.co/t/ssl-verification-mode/246964/6 "2020-09-01T17:58:18Z")

</div>

Нет, так вроде должно работать после перезагрузки. Я просто встречал ситуацию, когда в конфиге было

```auto
output.elasticsearch:
  # Array of hosts to connect to.
  hosts: ["https://ip_address:9200"]
  ssl.verification_mode: "none"

```

а потом многими строками ниже что-нибудь вроде:

```auto
output:
  logstash:
   ....

```

или

```auto
output.elasticsearch.ssl:
   something: "something"

```

и это стирало предыдущие ключи

---

<div class="post-metadata">

### Author: ![Boom](https://avatars.discourse-cdn.com/v4/letter/b/c4cdca/32.png) [@Boom](https://discuss.elastic.co/u/Boom)
#### Post date: [September 1, 2020, 6:58pm UTC](https://discuss.elastic.co/t/ssl-verification-mode/246964/7 "2020-09-01T18:58:52Z")

</div>

Спасибо за помощь  
в моем случае помогло  
добавить:

```auto
ssl.verification_mode: "none"

```

в блок:

```auto
# =================================== Kibana ===================================

# Starting with Beats version 6.0.0, the dashboards are loaded via the Kibana API.
# This requires a Kibana endpoint configuration.
setup.kibana:

  # Kibana Host
  # Scheme and port can be left out and will be set to the default (http and 5601)
  # In case you specify and additional path, the scheme is required: http://localhost:5601/path
  # IPv6 addresses should always be defined as: https://[2001:db8::1]:5601
  host: "https://ip_address:5601"
  ssl.verification_mode: "none"
  # Kibana Space ID
  # ID of the Kibana Space into which the dashboards should be loaded. By default,
  # the Default Space will be used.
  #space.id:

```

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [September 29, 2020, 6:59pm UTC](https://discuss.elastic.co/t/ssl-verification-mode/246964/8 "2020-09-29T18:59:00Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
