Unable to verify the first certificate - kibana/elasticsearch

Elastic Stack Elasticsearch
3

Hi,

thank you for reply, the certs are the same:

[root@localhost ~]# cat /etc/kibana/certs/ca.crt | openssl x509 
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

[root@localhost ~]# cat /etc/elasticsearch/certs/ca.crt | openssl x509 
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Also I can curl with the ca.crt from the /etc/kibana/certs/ :

[root@localhost ~]# curl -XGET https://0.0.0.0:9200/_license -u kibana_system:kibana  --cacert /etc/kibana/certs/ca.crt{
  "license" : {
    "status" : "active",
    "uid" : "872f0ad0-723e-43c8-b346-f43e2707d3de",
    "type" : "trial",
    "issue_date" : "2021-11-08T18:26:15.422Z",
    "issue_date_in_millis" : 1636395975422,
    "expiry_date" : "2021-12-08T18:26:15.422Z",
    "expiry_date_in_millis" : 1638987975422,
    "max_nodes" : 1000,
    "issued_to" : "elasticsearch",
    "issuer" : "elasticsearch",
    "start_date_in_millis" : -1
  }
}