# TLS Error Calling Webhook Connector from Kibana

**URL:** <https://discuss.elastic.co/t/tls-error-calling-webhook-connector-from-kibana/295498>\
**Category:** Kibana\
**Created:** [January 26, 2022, 5:58pm UTC](https://discuss.elastic.co/t/tls-error-calling-webhook-connector-from-kibana/295498 "2022-01-26T17:58:50Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![butchkelley](https://avatars.discourse-cdn.com/v4/letter/b/a4c791/32.png) [@butchkelley](https://discuss.elastic.co/u/butchkelley)\
**Post date:** [January 26, 2022, 5:58pm UTC](https://discuss.elastic.co/t/tls-error-calling-webhook-connector-from-kibana/295498/1 "2022-01-26T17:58:50Z")

</div>

Hello -

I'm running Elastic/Kibana version 7.16.2 on Linux with SSL enabled and CA signed certs.

My TLS related Kibana settings are:

```auto
server.ssl.enabled: true
server.ssl.certificate: /path/to/server.crt
server.ssl.key: /path/to/server.key
server.ssl.supportedProtocols: ["TLSv1.1", "TLSv1.2"]
elasticsearch.ssl.certificateAuthorities: ["/path/to/ca.crt"]
xpack.encryptedSavedObjects.encryptionKey: somelongstring.....
xpack.action.ssl.verificationMode: certificate

```

When trying to test my webhook connector from the Kibana Rules and Connectors interface I get the following TLS error:

```auto
[ECONNRESET] Client network socket disconnected before secure TLS connection was established

```

My endpoint is a NiFi server which requires authentication. I can successfully run the following curl command from my Kibana host to the NiFi host:

```auto
curl -XPOST --cert /path/to/server.crt --key /path/to/server.key --cacert /path/to/ca.crt 'https://somenifihost:12345'

```

When running this curl command I see in the NiFi logs that curl is passing my cert. However, when running Test from the Kibana Rules and Connectors interface I see no indication that Kibana is passing a certificate in the NiFi logs.

The error that NiFi is throwing (shown below), is incidental to the error I get if I try and curl to NiFi without any certificates which makes me believe Kibana is not passing the certificate to NiFi.

```auto
javax.net.ssl.SSLHandshakeException: Empty server certificate chain

```

I increased logging in Kibana but that didn't show me any useful information.

If I set "xpack.actions.ssl.verificationMode: none" and disable authentication in NiFi the webhook works as expected.

Any help would be greatly appreciated.

Thanks,  
Butch

---

<div class="post-metadata">

**Author:** ![Patrick\_Mueller](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/patrick_mueller/32/109425_2.png) [@Patrick\_Mueller](https://discuss.elastic.co/u/Patrick_Mueller)\
**Post date:** [February 3, 2022, 10:39pm UTC](https://discuss.elastic.co/t/tls-error-calling-webhook-connector-from-kibana/295498/2 "2022-02-03T22:39:34Z")

</div>

We support using custom certs in Kibana connectors via the `xpack.actions.customHostSettings` documented here: [Alerting and action settings in Kibana | Kibana Guide [7.17] | Elastic](https://www.elastic.co/guide/en/kibana/current/alert-action-settings-kb.html)

Note that we don't yet support keys there though.

If bypassing SSL verification mode is ok for this server, but you don't want it set "globally", there is also a `customHostSetting` you can use for just that host.

You will need to restart Kibana after making the configuration changes.

---

<div class="post-metadata">

**Author:** ![butchkelley](https://avatars.discourse-cdn.com/v4/letter/b/a4c791/32.png) [@butchkelley](https://discuss.elastic.co/u/butchkelley)\
**Post date:** [February 7, 2022, 3:42pm UTC](https://discuss.elastic.co/t/tls-error-calling-webhook-connector-from-kibana/295498/3 "2022-02-07T15:42:41Z")

</div>

Understood. Thanks for your response.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 7, 2022, 3:43pm UTC](https://discuss.elastic.co/t/tls-error-calling-webhook-connector-from-kibana/295498/4 "2022-03-07T15:43:14Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.