# What causes a "empty server certificate chain"

**URL:** <https://discuss.elastic.co/t/what-causes-a-empty-server-certificate-chain/226671>\
**Category:** Elasticsearch\
**Tags:** elastic-stack-security\
**Created:** [April 6, 2020, 10:03am UTC](https://discuss.elastic.co/t/what-causes-a-empty-server-certificate-chain/226671 "2020-04-06T10:03:27Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![maxg1](https://avatars.discourse-cdn.com/v4/letter/m/54ee81/32.png) [@maxg1](https://discuss.elastic.co/u/maxg1)\
**Post date:** [April 6, 2020, 10:03am UTC](https://discuss.elastic.co/t/what-causes-a-empty-server-certificate-chain/226671/1 "2020-04-06T10:03:28Z")

</div>

Hello,

i want to configure one elasticsearch-node to communicate via https and i am using the following parameters:

legend:  
(xpack.security) = xs

xs.enabled: true  
xs.transport.ssl.enabled: true  
xs.transport.ssl.verification\_mode: certificate  
xs.transport.ssl.keystore.path:   
xs.transport.ssl.truststore.path:   
xs.http.ssl.enabled: true  
xs.http.ssl.keystore.path:   
xs.http.ssl.truststore.path:

With the correct certificates added to the keystores for full-trust, i get: exception thrown in transport layer "empty server certificate chain" thrown.

Does anybody know what could went wrong here?

Thank you!

---

<div class="post-metadata">

**Author:** ![maxg1](https://avatars.discourse-cdn.com/v4/letter/m/54ee81/32.png) [@maxg1](https://discuss.elastic.co/u/maxg1)\
**Post date:** [April 6, 2020, 10:04am UTC](https://discuss.elastic.co/t/what-causes-a-empty-server-certificate-chain/226671/2 "2020-04-06T10:04:43Z")

</div>

the path parameters have been referenced according to the keystores path.

---

<div class="post-metadata">

**Author:** ![ikakavas](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ikakavas/32/34430_2.png) [@ikakavas](https://discuss.elastic.co/u/ikakavas)\
**Post date:** [April 6, 2020, 10:21am UTC](https://discuss.elastic.co/t/what-causes-a-empty-server-certificate-chain/226671/3 "2020-04-06T10:21:19Z")

</div>

Hi there @maxg1!

Please share your entire configuration, there should be nothing sensitive in the paths of the files and do not make random substitutions as it is really hard to read this and we can't never be sure if something is wrong because it is wrong or because you tried to substitute it.

Also, please share the whole exception from the logs rather your interpretation of it, it will make it so much easier for folks that want to assist you to actually do so !

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 4, 2020, 10:21am UTC](https://discuss.elastic.co/t/what-causes-a-empty-server-certificate-chain/226671/4 "2020-05-04T10:21:24Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.