# TLS certs issue on Elastice search

**URL:** <https://discuss.elastic.co/t/tls-certs-issue-on-elastice-search/114529>\
**Category:** Elasticsearch\
**Created:** [January 8, 2018, 1:35pm UTC](https://discuss.elastic.co/t/tls-certs-issue-on-elastice-search/114529 "2018-01-08T13:35:25Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![SJN8](https://avatars.discourse-cdn.com/v4/letter/s/f08c70/32.png) [@SJN8](https://discuss.elastic.co/u/SJN8)\
**Post date:** [January 8, 2018, 1:35pm UTC](https://discuss.elastic.co/t/tls-certs-issue-on-elastice-search/114529/1 "2018-01-08T13:35:25Z")

</div>

Hi ,

I have generated certificates for TLS on Elastic search cluster , after enabling below configuration ,  
getting exceptions ,

[2018-01-08T14:28:48,784][WARN][o.e.x.s.t.n.SecurityNetty4Transport] [ES-Node-node01] send message failed [channel: org.elasticsearch.transport.netty4.NettyTcpChannel@40336b7d]  
javax.net.ssl.SSLException: SSLEngine closed already  
at io.netty.handler.ssl.SslHandler.wrap(...)(Unknown Source) ~[?:?]  
[2018-01-08T14:28:48,794][WARN][o.e.x.s.t.n.SecurityNetty4Transport] [ES-Node-node01] exception caught on transport layer [org.elasticsearch.transport.netty4.NettyTcpChannel@40336b7d], closing connection  
io.netty.handler.codec.DecoderException: javax.net.ssl.SSLHandshakeException: General SSLEngine problem  
at io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:459) ~[netty-codec-4.1.13.Final.jar:4

xpack.ssl.key: /home/es/config/x-pack/node01.key  
xpack.ssl.certificate: /home/es/config/x-pack/node01.crt  
xpack.ssl.certificate\_authorities: ["/home/es/config/x-pack/ca.crt"]  
xpack.security.transport.ssl.enabled: true  
xpack.security.http.ssl.enabled: true

Please help on the same .

---

<div class="post-metadata">

**Author:** ![ikakavas](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ikakavas/32/34430_2.png) [@ikakavas](https://discuss.elastic.co/u/ikakavas)\
**Post date:** [January 8, 2018, 9:51pm UTC](https://discuss.elastic.co/t/tls-certs-issue-on-elastice-search/114529/2 "2018-01-08T21:51:49Z")

</div>

Hi, can you please post the full stacktrace, _using the **\</\>** button for formatting_ ?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [February 5, 2018, 9:52pm UTC](https://discuss.elastic.co/t/tls-certs-issue-on-elastice-search/114529/3 "2018-02-05T21:52:21Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.