# Trying to use our own certificates for kibana/elasticsearch but page doesn't load after

**URL:** <https://discuss.elastic.co/t/trying-to-use-our-own-certificates-for-kibana-elasticsearch-but-page-doesnt-load-after/293729>\
**Category:** Kibana\
**Tags:** elastic-stack-security, docker\
**Created:** [January 7, 2022, 11:17am UTC](https://discuss.elastic.co/t/trying-to-use-our-own-certificates-for-kibana-elasticsearch-but-page-doesnt-load-after/293729 "2022-01-07T11:17:53Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![g0nz0](https://avatars.discourse-cdn.com/v4/letter/g/b5e925/32.png) [@g0nz0](https://discuss.elastic.co/u/g0nz0)\
**Post date:** [January 7, 2022, 11:17am UTC](https://discuss.elastic.co/t/trying-to-use-our-own-certificates-for-kibana-elasticsearch-but-page-doesnt-load-after/293729/1 "2022-01-07T11:17:53Z")

</div>

Hello,

I've manage to build our ELK environment on Ubuntu 20.0.4 (not Docker) and setup Elastiflow, it works great and I followed this [guide](https://docs.elastiflow.com/docs/elastic_stack_ubuntu/) which also uses self certs, so we just access using [https://1.2.3.4:5601](https://1.2.3.4:5601) for example.

I've now been asked to use a proper FQDN for it like [https://vmnetflow.mydomain.com](https://vmnetflow.mydomain.com) and the team that looks after our certificates have given me 2 files. Btw I'm not expert at certificates or ELK.

Files:  
vmnetflow\_mydomain\_com.crt  
vmnetflow\_mydomain\_com.key

They also gave me the CA cert camydomain.cer

So I copied these 2:

`/etc/elasticsearch/certs/`  
`/etc/kibana/certs/`

and the ca cert to:

`/etc/elasticsearch/certs/ca`  
`/etc/kibana/certs/ca`

Then edited the Elasticsearch and kibana yml files to point to these. I then restart the services which are successful and then try the url of [https://vmnetflow.mydomain.com](https://vmnetflow.mydomain.com) and it says it can't connect, not page loads at all. If I try using the IP I get the same issue.

I'm not entirely sure what I need do next to check.

My elastiflow config [here](https://pastebin.com/jDgzZE7n). I've # out the working self certs (3 lines) so you can see the working ones too.

My Kibana config [here](https://pastebin.com/dXNMg9V5)

Any ideas would be most welcome, I'm hoping a second pair of eyes might see something if overlooked.

Thanks

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [January 9, 2022, 9:55pm UTC](https://discuss.elastic.co/t/trying-to-use-our-own-certificates-for-kibana-elasticsearch-but-page-doesnt-load-after/293729/2 "2022-01-09T21:55:29Z")

</div>

What do your Elasticsearch logs show?

---

<div class="post-metadata">

**Author:** ![g0nz0](https://avatars.discourse-cdn.com/v4/letter/g/b5e925/32.png) [@g0nz0](https://discuss.elastic.co/u/g0nz0)\
**Post date:** [January 10, 2022, 2:27pm UTC](https://discuss.elastic.co/t/trying-to-use-our-own-certificates-for-kibana-elasticsearch-but-page-doesnt-load-after/293729/3 "2022-01-10T14:27:59Z")

</div>

If I just change the cert path in the Elasticsearch.yml first (I'm not sure if I have to do the Kibana.yml to or can do after) then the log file doesn't show any errors, but the page doesn't load and says:

"{"statusCode":503,"error":"Service Unavailable","message":"License is not available."}:

If I revert to the selfcerts all is ok again.

---

<div class="post-metadata">

**Author:** ![g0nz0](https://avatars.discourse-cdn.com/v4/letter/g/b5e925/32.png) [@g0nz0](https://discuss.elastic.co/u/g0nz0)\
**Post date:** [January 12, 2022, 5:42pm UTC](https://discuss.elastic.co/t/trying-to-use-our-own-certificates-for-kibana-elasticsearch-but-page-doesnt-load-after/293729/4 "2022-01-12T17:42:11Z")

</div>

This is my log file - [elasticsearchlog1 - Pastebin.com](https://pastebin.com/zYGsWDxn)

Could the certs I've been given be wrong or the CA cert?

---

<div class="post-metadata">

**Author:** ![TimV](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/timv/32/13162_2.png) [@TimV](https://discuss.elastic.co/u/TimV)\
**Post date:** [January 13, 2022, 12:29am UTC](https://discuss.elastic.co/t/trying-to-use-our-own-certificates-for-kibana-elasticsearch-but-page-doesnt-load-after/293729/5 "2022-01-13T00:29:03Z")

</div>

Elasticsearch is starting fine, and is healthy:

> [2022-01-12T17:25:41,521][INFO][o.e.c.r.a.AllocationService] [svr-elastiflow] Cluster health status changed from [RED] to [GREEN] (reason: [shards started [[.kibana-event-log-7.15.0-000001][0]]]).

We'll need to see the Kibana logs to know why Kibana isn't working.

---

<div class="post-metadata">

**Author:** ![g0nz0](https://avatars.discourse-cdn.com/v4/letter/g/b5e925/32.png) [@g0nz0](https://discuss.elastic.co/u/g0nz0)\
**Post date:** [January 13, 2022, 1:51pm UTC](https://discuss.elastic.co/t/trying-to-use-our-own-certificates-for-kibana-elasticsearch-but-page-doesnt-load-after/293729/6 "2022-01-13T13:51:34Z")

</div>

There is not much in the kabana.log in /var/log/kibana.log after I restart the service:

`{"type":"log","@timestamp":"2022-01-13T13:35:16+00:00","tags":["info","plugins-system","standard"],"pid":2473,"message":"Stopping all plugins."}`

`{"type":"log","@timestamp":"2022-01-13T13:35:16+00:00","tags":["info","plugins","monitoring","monitoring","kibana-monitoring"],"pid":2473,"message":"Monitoring stats collection is stopped"}`

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [February 10, 2022, 1:52pm UTC](https://discuss.elastic.co/t/trying-to-use-our-own-certificates-for-kibana-elasticsearch-but-page-doesnt-load-after/293729/7 "2022-02-10T13:52:23Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
