# Winlogbeat error connecting to Elasticsearch at https://ip:9200: Get "https://ip:9200": x509: certificate signed by unknown authority (possibly because of "crypto/rsa: verification error" while trying to verify candidate authority cert

**URL:** <https://discuss.elastic.co/t/winlogbeat-error-connecting-to-elasticsearch-at-https-ip-get-https-ip-9200-x509-certificate-signed-by-unknown-authority-possibly-because-of-crypto-rsa-verification-error-while-trying-to-verify-candidate-authority-cert/308419>\
**Category:** Beats\
**Tags:** winlogbeat\
**Created:** [June 29, 2022, 4:29am UTC](https://discuss.elastic.co/t/winlogbeat-error-connecting-to-elasticsearch-at-https-ip-get-https-ip-9200-x509-certificate-signed-by-unknown-authority-possibly-because-of-crypto-rsa-verification-error-while-trying-to-verify-candidate-authority-cert/308419 "2022-06-29T04:29:38Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![alipujaistopo](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/alipujaistopo/32/50791_2.png) [@alipujaistopo](https://discuss.elastic.co/u/alipujaistopo)\
**Post date:** [June 29, 2022, 4:29am UTC](https://discuss.elastic.co/t/winlogbeat-error-connecting-to-elasticsearch-at-https-ip-get-https-ip-9200-x509-certificate-signed-by-unknown-authority-possibly-because-of-crypto-rsa-verification-error-while-trying-to-verify-candidate-authority-cert/308419/1 "2022-06-29T04:29:39Z")

</div>

i just try to install winlogbeat, and i put the ip into elasticsearch-ca.pem. but have an error like this. please help

```auto
2022-06-29T11:25:47.925+0700 INFO instance/beat.go:328 Setup Beat: winlogbeat; Version: 7.17.1
2022-06-29T11:25:47.925+0700 INFO [index-management] idxmgmt/std.go:184 Set output.elasticsearch.index to 'winlogbeat-7.17.1' as ILM is enabled.
2022-06-29T11:25:47.926+0700 WARN [cfgwarn] tlscommon/config.go:100 DEPRECATED: Treating the CommonName field on X.509 certificates as a host name when no Subject Alternative Names are present is going to be removed. Please update your certificates if needed. Will be removed in version: 8.0.0
2022-06-29T11:25:47.926+0700 INFO [esclientleg] eslegclient/connection.go:105 elasticsearch url: https://202.158.5.68:9200
2022-06-29T11:25:47.927+0700 INFO [publisher] pipeline/module.go:113 Beat name: lt03ali
2022-06-29T11:25:47.927+0700 INFO [winlogbeat] beater/winlogbeat.go:66 State will be read from and persisted to C:\winlogbeat\data\.winlogbeat.yml
2022-06-29T11:25:47.968+0700 WARN [cfgwarn] registered_domain/registered_domain.go:61 BETA: The registered_domain processor is beta.
2022-06-29T11:25:48.024+0700 WARN [cfgwarn] registered_domain/registered_domain.go:61 BETA: The registered_domain processor is beta.
2022-06-29T11:25:48.036+0700 INFO [esclientleg] eslegclient/connection.go:105 elasticsearch url: https://202.158.5.68:9200
2022-06-29T11:25:48.131+0700 ERROR [esclientleg] transport/logging.go:37 Error dialing x509: certificate signed by unknown authority (possibly because of "crypto/rsa: verification error" while trying to verify candidate authority certificate "Elastic Certificate Tool Autogenerated CA") {"network": "tcp", "address": "202.158.5.68:9200"}
2022-06-29T11:25:48.132+0700 ERROR [esclientleg] eslegclient/connection.go:231 error connecting to Elasticsearch at https://202.158.5.68:9200: Get "https://202.158.5.68:9200": x509: certificate signed by unknown authority (possibly because of "crypto/rsa: verification error" while trying to verify candidate authority certificate "Elastic Certificate Tool Autogenerated CA")
2022-06-29T11:25:48.134+0700 ERROR instance/beat.go:1015 Exiting: couldn't connect to any of the configured Elasticsearch hosts. Errors: [error connecting to Elasticsearch at https://202.158.5.68:9200: Get "https://202.158.5.68:9200": x509: certificate signed by unknown authority (possibly because of "crypto/rsa: verification error" while trying to verify candidate authority certificate "Elastic Certificate Tool Autogenerated CA")]
Exiting: couldn't connect to any of the configured Elasticsearch hosts. Errors: [error connecting to Elasticsearch at https://202.158.5.68:9200: Get "https://202.158.5.68:9200": x509: certificate signed by unknown authority (possibly because of "crypto/rsa: verification error" while trying to verify candidate authority certificate "Elastic Certificate Tool Autogenerated CA")]

```

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 27, 2022, 6:30am UTC](https://discuss.elastic.co/t/winlogbeat-error-connecting-to-elasticsearch-at-https-ip-get-https-ip-9200-x509-certificate-signed-by-unknown-authority-possibly-because-of-crypto-rsa-verification-error-while-trying-to-verify-candidate-authority-cert/308419/2 "2022-07-27T06:30:32Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.