# Unable to connect kibana after encryption?

**URL:** <https://discuss.elastic.co/t/unable-to-connect-kibana-after-encryption/24767>\
**Category:** Kibana\
**Created:** [July 2, 2015, 6:28am UTC](https://discuss.elastic.co/t/unable-to-connect-kibana-after-encryption/24767 "2015-07-02T06:28:36Z")\
**Posts on this page:** 20\
**Page:** 1

<div class="post-metadata">

**Author:** ![Akhilesh\_Anb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/akhilesh_anb/32/4343_2.png) [@Akhilesh\_Anb](https://discuss.elastic.co/u/Akhilesh_Anb)\
**Post date:** [July 2, 2015, 6:28am UTC](https://discuss.elastic.co/t/unable-to-connect-kibana-after-encryption/24767/1 "2015-07-02T06:28:36Z")

</div>

I have done the encryption ( ssl ) ... now my elasticsearch link is `https://localhost:9200`

I mentioned this link with https in kibana.yml.. Now im unable to start kibana.. im getting errors like:

```
 "error","node_env":"production","error":"Request error, retrying -- DEPTH_ZERO_SELF_SIGNED_CERT"}

"No living connections","node_env":"production"

```

Can you please help me

---

<div class="post-metadata">

**Author:** ![tbragin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tbragin/32/45166_2.png) [@tbragin](https://discuss.elastic.co/u/tbragin)\
**Post date:** [July 2, 2015, 1:53pm UTC](https://discuss.elastic.co/t/unable-to-connect-kibana-after-encryption/24767/2 "2015-07-02T13:53:54Z")

</div>

> [@Akhilesh\_Anb](#):
>
> "error","node\_env":"production","error":"Request error, retrying -- DEPTH\_ZERO\_SELF\_SIGNED\_CERT"}

Perpaps it's not liking your self-signed cert. Try using these additional settings in kibana.yml, in particular disabling ssl cert validation, if needed, during testing:

verify\_ssl: false  
ca: /link/to/my/cacert.pem  
ssl\_key\_file: /link/to/my/server.key  
ssl\_cert\_file: /link/to/my/server.crt

More info on these settings here: [Configure Kibana | Kibana Guide [8.11] | Elastic](https://www.elastic.co/guide/en/kibana/current/kibana-server-properties.html)

---

<div class="post-metadata">

**Author:** ![Akhilesh\_Anb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/akhilesh_anb/32/4343_2.png) [@Akhilesh\_Anb](https://discuss.elastic.co/u/Akhilesh_Anb)\
**Post date:** [July 2, 2015, 2:16pm UTC](https://discuss.elastic.co/t/unable-to-connect-kibana-after-encryption/24767/3 "2015-07-02T14:16:44Z")

</div>

Everything is fine in kibana as in that link.. If i disable everything regarding ssl also showing same error... I think main problem is near `https://localhost:9200`

Its not connecting to elasticsearch.

```
"level":"info","message":"Unable to connect to elasticsearch at https://localhost:9200. Retrying in 2.5 seconds.","node_env":"production"}

```

If im giving `verify_ssl: false` its showing me very big error...

---

<div class="post-metadata">

**Author:** ![tbragin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tbragin/32/45166_2.png) [@tbragin](https://discuss.elastic.co/u/tbragin)\
**Post date:** [July 2, 2015, 10:02pm UTC](https://discuss.elastic.co/t/unable-to-connect-kibana-after-encryption/24767/4 "2015-07-02T22:02:09Z")

</div>

What error is it showing when all SSL is turned off?

Btw, how are you security Elasticsearch, using Shield? If so, you may consider also posting your question to the Shield room: [https://discuss.elastic.co/c/shield](https://discuss.elastic.co/c/shield)

---

<div class="post-metadata">

**Author:** ![Akhilesh\_Anb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/akhilesh_anb/32/4343_2.png) [@Akhilesh\_Anb](https://discuss.elastic.co/u/Akhilesh_Anb)\
**Post date:** [July 3, 2015, 7:08am UTC](https://discuss.elastic.co/t/unable-to-connect-kibana-after-encryption/24767/5 "2015-07-03T07:08:44Z")

</div>

This is the error im getting if i make ssl false

```
,"level":"error","message":"Service Unavailable","node_env":"production","error":{"message":"Service Unavailable","name":"Error","stack":"Error: Service Unavailable\n at respond (/home/ubuntu/kibana-4.0.2-linux-x64/src/node_modules/elasticsearch/src/lib/transport.js:235:15)\n at checkRespForFailure (/home/ubuntu/kibana-4.0.2-linux-x64/src/node_modules/elasticsearch/src/lib/transport.js:203:7)\n at HttpConnector.<anonymous> (/home/ubuntu/kibana-4.0.2-linux-x64/src/node_modules/elasticsearch/src/lib/connectors/http.js:156:7)\n at IncomingMessage.bound (/home/ubuntu/kibana-4.0.2-linux-x64/src/node_modules/elasticsearch/node_modules/lodash-node/modern/internals/baseBind.js:56:17)\n at IncomingMessage.emit (events.js:117:20)\n at _stream_readable.js:944:16\n at process._tickCallback (node.js:442:13)\n"}}
```

---

<div class="post-metadata">

**Author:** ![tbragin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tbragin/32/45166_2.png) [@tbragin](https://discuss.elastic.co/u/tbragin)\
**Post date:** [July 3, 2015, 1:53pm UTC](https://discuss.elastic.co/t/unable-to-connect-kibana-after-encryption/24767/6 "2015-07-03T13:53:11Z")

</div>

503 Service Unavailable - means Elasticsearch is up, but unavailable for some reason and can not handle requests.

We are working on more graceful error pages:

> <https://github.com/elastic/kibana/issues/2822>

---

<div class="post-metadata">

**Author:** ![Akhilesh\_Anb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/akhilesh_anb/32/4343_2.png) [@Akhilesh\_Anb](https://discuss.elastic.co/u/Akhilesh_Anb)\
**Post date:** [July 3, 2015, 2:01pm UTC](https://discuss.elastic.co/t/unable-to-connect-kibana-after-encryption/24767/7 "2015-07-03T14:01:55Z")

</div>

Hey @tbragin, Now my elasticsearch status is 200..

Now if commented ssl:true.. then kibana is starting...

When im accessing to kibana im getting error

 ![](https://us1.discourse-cdn.com/elastic/original/2X/3/35f289f2d3e2ff20618e8ad70a1b0a5f5ce181ca.jpg)

If i enable ssl:true...its not starting.

---

<div class="post-metadata">

**Author:** ![tbragin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tbragin/32/45166_2.png) [@tbragin](https://discuss.elastic.co/u/tbragin)\
**Post date:** [July 3, 2015, 2:43pm UTC](https://discuss.elastic.co/t/unable-to-connect-kibana-after-encryption/24767/8 "2015-07-03T14:43:53Z")

</div>

Could you share your kibana.yml and elasticsearch.yml? Feel free to just DM me with this info.

---

<div class="post-metadata">

**Author:** ![tbragin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tbragin/32/45166_2.png) [@tbragin](https://discuss.elastic.co/u/tbragin)\
**Post date:** [July 3, 2015, 3:01pm UTC](https://discuss.elastic.co/t/unable-to-connect-kibana-after-encryption/24767/10 "2015-07-03T15:01:22Z")

</div>

I downloaded elasticsearch.yml. Looks like the kibana link also points to Elasticsearch?

---

<div class="post-metadata">

**Author:** ![tbragin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tbragin/32/45166_2.png) [@tbragin](https://discuss.elastic.co/u/tbragin)\
**Post date:** [July 3, 2015, 3:03pm UTC](https://discuss.elastic.co/t/unable-to-connect-kibana-after-encryption/24767/12 "2015-07-03T15:03:41Z")

</div>

Ok, both downloaded... looking.

---

<div class="post-metadata">

**Author:** ![tbragin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tbragin/32/45166_2.png) [@tbragin](https://discuss.elastic.co/u/tbragin)\
**Post date:** [July 3, 2015, 3:15pm UTC](https://discuss.elastic.co/t/unable-to-connect-kibana-after-encryption/24767/13 "2015-07-03T15:15:14Z")

</div>

Which versions of ES, Kibana, and Shield are you running?

---

<div class="post-metadata">

**Author:** ![Akhilesh\_Anb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/akhilesh_anb/32/4343_2.png) [@Akhilesh\_Anb](https://discuss.elastic.co/u/Akhilesh_Anb)\
**Post date:** [July 3, 2015, 3:16pm UTC](https://discuss.elastic.co/t/unable-to-connect-kibana-after-encryption/24767/14 "2015-07-03T15:16:42Z")

</div>

Kibana - 4.0.2

Elasticsearch 1.5

shield - latest version ( 1.3 i think )

---

<div class="post-metadata">

**Author:** ![Akhilesh\_Anb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/akhilesh_anb/32/4343_2.png) [@Akhilesh\_Anb](https://discuss.elastic.co/u/Akhilesh_Anb)\
**Post date:** [July 3, 2015, 3:18pm UTC](https://discuss.elastic.co/t/unable-to-connect-kibana-after-encryption/24767/15 "2015-07-03T15:18:35Z")

</div>

Before everything was fine.. one day back i created ca certificate and done encryption.. after that only im getting problem..

---

<div class="post-metadata">

**Author:** ![tbragin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tbragin/32/45166_2.png) [@tbragin](https://discuss.elastic.co/u/tbragin)\
**Post date:** [July 3, 2015, 3:19pm UTC](https://discuss.elastic.co/t/unable-to-connect-kibana-after-encryption/24767/16 "2015-07-03T15:19:52Z")

</div>

Got it. So with Shield on, but without encryption everything still functioned ok, right?

Your configs look similar to mine (though not identical). Let me upgrade my setup to Shield 1.3 and let you know if I experience the same problem. It's a holiday in the US, so I'll try to get back to you later today or this weekend.

---

<div class="post-metadata">

**Author:** ![Akhilesh\_Anb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/akhilesh_anb/32/4343_2.png) [@Akhilesh\_Anb](https://discuss.elastic.co/u/Akhilesh_Anb)\
**Post date:** [July 3, 2015, 3:21pm UTC](https://discuss.elastic.co/t/unable-to-connect-kibana-after-encryption/24767/17 "2015-07-03T15:21:17Z")

</div>

Yes after encryption only im getting problem.

Thanq very much for your support... please let me know once its is done... thanq

---

<div class="post-metadata">

**Author:** ![Akhilesh\_Anb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/akhilesh_anb/32/4343_2.png) [@Akhilesh\_Anb](https://discuss.elastic.co/u/Akhilesh_Anb)\
**Post date:** [July 3, 2015, 3:24pm UTC](https://discuss.elastic.co/t/unable-to-connect-kibana-after-encryption/24767/18 "2015-07-03T15:24:51Z")

</div>

i used this command to download shield.. I dont know accurate version of shield..

```
bin/plugin -i elasticsearch/shield/latest
```

---

<div class="post-metadata">

**Author:** ![tbragin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tbragin/32/45166_2.png) [@tbragin](https://discuss.elastic.co/u/tbragin)\
**Post date:** [July 3, 2015, 3:28pm UTC](https://discuss.elastic.co/t/unable-to-connect-kibana-after-encryption/24767/19 "2015-07-03T15:28:19Z")

</div>

Ok, so I'm now running ES 1.6, Kibana 4.1, and Shield 1.3 and it seems to work with encryption on.

Here are my differences from your setup:

_elasticsearch.yml_  
shield.ssl.keystore.path: path/node01.jks  
shield.ssl.keystore.password: password  
shield.ssl.truststore.path: path/truststore.jks  
shield.ssl.truststore.password: password  
shield.transport.ssl: true  
shield.http.ssl: true  
**shield.ssl.hostname\_verification: false**  
shield.ssl.hostname\_verification.resolve\_name: false

_kibana.yml_  
port: 5601  
host: "0.0.0.0" **---\> host: "localhost"**  
elasticsearch\_url: "[https://localhost:9200](https://localhost:9200)"  
elasticsearch\_preserve\_host: true  
kibana\_index: ".kibana"  
**kibana\_elasticsearch\_username: kibana4\_server**  
**kibana\_elasticsearch\_password: kibana4\_server**  
verify\_ssl: true  
ca: path/cacert.pem  
ssl\_key\_file: path/server.key  
ssl\_cert\_file: path/server.crt

I don't know if there is anything material different here, but you could try making these changes, perhaps. Turning on encryption is tricky... a lot depends on having set up the certificate properly, which is very environment-specific.

---

<div class="post-metadata">

**Author:** ![Akhilesh\_Anb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/akhilesh_anb/32/4343_2.png) [@Akhilesh\_Anb](https://discuss.elastic.co/u/Akhilesh_Anb)\
**Post date:** [July 3, 2015, 3:31pm UTC](https://discuss.elastic.co/t/unable-to-connect-kibana-after-encryption/24767/20 "2015-07-03T15:31:58Z")

</div>

In kibana.yml nothing is different..  
In elasticsearch.yml ill add this line

```
shield.ssl.hostname_verification: false

```

Ill let you know..

---

<div class="post-metadata">

**Author:** ![Akhilesh\_Anb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/akhilesh_anb/32/4343_2.png) [@Akhilesh\_Anb](https://discuss.elastic.co/u/Akhilesh_Anb)\
**Post date:** [July 3, 2015, 3:35pm UTC](https://discuss.elastic.co/t/unable-to-connect-kibana-after-encryption/24767/21 "2015-07-03T15:35:40Z")

</div>

@tbragin  
Can you give me the link for generating ssl\_key and crt.. I'll generate it again.

---

<div class="post-metadata">

**Author:** ![tbragin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tbragin/32/45166_2.png) [@tbragin](https://discuss.elastic.co/u/tbragin)\
**Post date:** [July 4, 2015, 3:22pm UTC](https://discuss.elastic.co/t/unable-to-connect-kibana-after-encryption/24767/22 "2015-07-04T15:22:23Z")

</div>

I don't think we have specific instructions for generating ssl\_key and ssl\_cert, as every environment may have different requirements for generating certificates.

So, to summarize, could you paste again the errors you receive in Kibana and Elasticsearch logs, when you turn on encryption, both when ssl\_verify is set to "true" and to "false"?

[Next page](https://discuss.elastic.co/t/unable-to-connect-kibana-after-encryption/24767.md?page=2)