# X-Pack tranport client exception for es6.6 **URL:** \ **Category:** Elasticsearch\ **Created:** [February 14, 2019, 8:17am UTC](https://discuss.elastic.co/t/x-pack-tranport-client-exception-for-es6-6/168358 "2019-02-14T08:17:59Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![iamazy](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/iamazy/32/36501_2.png) [@iamazy](https://discuss.elastic.co/u/iamazy)\ **Post date:** [February 14, 2019, 8:17am UTC](https://discuss.elastic.co/t/x-pack-tranport-client-exception-for-es6-6/168358/1 "2019-02-14T08:17:59Z")
Hello PreBuiltXPackTransportClient configuration are as follow, > if (client == null) { > builder.put("client.transport.sniff", true) > .put("cluster.name","DS\_Project\_v2") > .put("xpack.security.user","elastic:321++nsw") > .put("xpack.security.transport.ssl.enabled", "true") > .put("xpack.security.transport.ssl.verification\_mode", "certificate") > .put("xpack.security.transport.ssl.keystore.path", "E:\workspace\Work\spring-cloud\elasticsearch-data-transport\src\main\resources\static\certs\elastic-stack-ca.p12") > .put("xpack.security.transport.ssl.truststore.path", "E:\workspace\Work\spring-cloud\elasticsearch-data-transport\src\main\resources\static\certs\elastic-stack-ca.p12"); > PreBuiltXPackTransportClient xPackTransportClient = new PreBuiltXPackTransportClient(builder.build()); > try { > xPackTransportClient.addTransportAddress(new TransportAddress(InetAddress.getByName(host), port)); > } catch (UnknownHostException e) { > e.printStackTrace(); > } > client = xPackTransportClient; > } but once I run this program allways cause this exception: > java.security.UnrecoverableKeyException: failed to decrypt safe contents entry: javax.crypto.BadPaddingException: Given final block not properly padded. Such issues can arise if a bad key is used during decryption. > at sun.security.pkcs12.PKCS12KeyStore.engineLoad(PKCS12KeyStore.java:2059) ~[na:1.8.0\_202] > at java.security.KeyStore.load(KeyStore.java:1445) ~[na:1.8.0\_202] > at org.elasticsearch.xpack.core.ssl.TrustConfig.getStore(TrustConfig.java:89) ~[x-pack-core-6.6.0.jar:6.6.0] > at org.elasticsearch.xpack.core.ssl.StoreTrustConfig.createTrustManager(StoreTrustConfig.java:58) ~[x-pack-core-6.6.0.jar:6.6.0] > at org.elasticsearch.xpack.core.ssl.SSLService.createSslContext(SSLService.java:364) ~[x-pack-core-6.6.0.jar:6.6.0] > at java.util.HashMap.computeIfAbsent(HashMap.java:1127) ~[na:1.8.0\_202] > at org.elasticsearch.xpack.core.ssl.SSLService.loadSSLConfigurations(SSLService.java:421) ~[x-pack-core-6.6.0.jar:6.6.0] > at org.elasticsearch.xpack.core.ssl.SSLService.(SSLService.java:96) ~[x-pack-core-6.6.0.jar:6.6.0] > at org.elasticsearch.xpack.core.XPackClientPlugin.getTransports(XPackClientPlugin.java:474) ~[x-pack-core-6.6.0.jar:6.6.0] > at org.elasticsearch.common.network.NetworkModule.(NetworkModule.java:130) ~[elasticsearch-6.6.0.jar:6.6.0] > at org.elasticsearch.client.transport.TransportClient.buildTemplate(TransportClient.java:190) ~[elasticsearch-6.6.0.jar:6.6.0] > at org.elasticsearch.client.transport.TransportClient.(TransportClient.java:288) ~[elasticsearch-6.6.0.jar:6.6.0] > at org.elasticsearch.transport.client.PreBuiltTransportClient.(PreBuiltTransportClient.java:128) ~[transport-6.6.0.jar:6.6.0] > at org.elasticsearch.xpack.client.PreBuiltXPackTransportClient.(PreBuiltXPackTransportClient.java:47) ~[x-pack-transport-6.6.0.jar:6.6.0] > at org.elasticsearch.xpack.client.PreBuiltXPackTransportClient.(PreBuiltXPackTransportClient.java:42) ~[x-pack-transport-6.6.0.jar:6.6.0] > at org.elasticsearch.xpack.client.PreBuiltXPackTransportClient.(PreBuiltXPackTransportClient.java:38) ~[x-pack-transport-6.6.0.jar:6.6.0] > at com.wsn.springcloud.elasticsearch.dao.ElasticDao.(ElasticDao.java:36) ~[classes/:na] > at com.wsn.springcloud.elasticsearch.controller.TestController.query(TestController.java:44) ~[classes/:na] > at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) ~[na:1.8.0\_202] > at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) ~[na:1.8.0\_202] > at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) ~[na:1.8.0\_202] > at java.lang.reflect.Method.invoke(Method.java:498) ~[na:1.8.0\_202] > at org.springframework.web.method.support.InvocableHandlerMethod.doInvoke(InvocableHandlerMethod.java:189) ~[spring-web-5.1.4.RELEASE.jar:5.1.4.RELEASE] > at org.springframework.web.method.support.InvocableHandlerMethod.invokeForRequest(InvocableHandlerMethod.java:138) ~[spring-web-5.1.4.RELEASE.jar:5.1.4.RELEASE] > at org.springframework.web.servlet.mvc.method.annotation.ServletInvocableHandlerMethod.invokeAndHandle(ServletInvocableHandlerMethod.java:102) ~[spring-webmvc-5.1.4.RELEASE.jar:5.1.4.RELEASE] > at org.springframework.web.servlet.mvc.method.annotation.RequestMappingHandlerAdapter.invokeHandlerMethod(RequestMappingHandlerAdapter.java:895) ~[spring-webmvc-5.1.4.RELEASE.jar:5.1.4.RELEASE] > at org.springframework.web.servlet.mvc.method.annotation.RequestMappingHandlerAdapter.handleInternal(RequestMappingHandlerAdapter.java:800) ~[spring-webmvc-5.1.4.RELEASE.jar:5.1.4.RELEASE] > at org.springframework.web.servlet.mvc.method.AbstractHandlerMethodAdapter.handle(AbstractHandlerMethodAdapter.java:87) ~[spring-webmvc-5.1.4.RELEASE.jar:5.1.4.RELEASE] > at org.springframework.web.servlet.DispatcherServlet.doDispatch(DispatcherServlet.java:1038) ~[spring-webmvc-5.1.4.RELEASE.jar:5.1.4.RELEASE] > at org.springframework.web.servlet.DispatcherServlet.doService(DispatcherServlet.java:942) ~[spring-webmvc-5.1.4.RELEASE.jar:5.1.4.RELEASE] > at org.springframework.web.servlet.FrameworkServlet.processRequest(FrameworkServlet.java:1005) ~[spring-webmvc-5.1.4.RELEASE.jar:5.1.4.RELEASE] > at org.springframework.web.servlet.FrameworkServlet.doGet(FrameworkServlet.java:897) ~[spring-webmvc-5.1.4.RELEASE.jar:5.1.4.RELEASE] > at javax.servlet.http.HttpServlet.service(HttpServlet.java:634) ~[tomcat-embed-core-9.0.14.jar:9.0.14] > at org.springframework.web.servlet.FrameworkServlet.service(FrameworkServlet.java:882) ~[spring-webmvc-5.1.4.RELEASE.jar:5.1.4.RELEASE] > at javax.servlet.http.HttpServlet.service(HttpServlet.java:741) ~[tomcat-embed-core-9.0.14.jar:9.0.14] > at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:231) ~[tomcat-embed-core-9.0.14.jar:9.0.14] > at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) ~[tomcat-embed-core-9.0.14.jar:9.0.14] Is there anyway to solve this exception? Thanks ---
**Author:** ![ikakavas](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ikakavas/32/34430_2.png) [@ikakavas](https://discuss.elastic.co/u/ikakavas)\ **Post date:** [February 15, 2019, 10:11am UTC](https://discuss.elastic.co/t/x-pack-tranport-client-exception-for-es6-6/168358/2 "2019-02-15T10:11:53Z")
Hi there, it looks like your `elastic-stack-ca.p12` is password protected. You need to set the password by adding the two following settings in your client config: ```auto xpack.security.transport.ssl.keystore.password: xpack.security.transport.ssl.truststore.password: ``` See: [https://www.elastic.co/guide/en/elasticsearch/reference/current/security-settings.html#\_java\_keystore\_files\_4](https://www.elastic.co/guide/en/elasticsearch/reference/current/security-settings.html#_java_keystore_files_4) also for more details ---
**Author:** ![iamazy](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/iamazy/32/36501_2.png) [@iamazy](https://discuss.elastic.co/u/iamazy)\ **Post date:** [February 16, 2019, 2:54am UTC](https://discuss.elastic.co/t/x-pack-tranport-client-exception-for-es6-6/168358/3 "2019-02-16T02:54:26Z")
Hello ikakavas It's helpful to me, It solved my problem, Thanks ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [March 16, 2019, 2:54am UTC](https://discuss.elastic.co/t/x-pack-tranport-client-exception-for-es6-6/168358/4 "2019-03-16T02:54:29Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.