Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Console 5.0.0-rc1 cannot verify ES certificate with xpack security installed #8711

Closed
mike-mosher opened this issue Oct 17, 2016 · 2 comments

Comments

@mike-mosher
Copy link

Kibana version: 5.0.0-rc1

Elasticsearch version: 5.0.0-rc1

Server OS version: Windows 2012R2 64-bit

Browser version: Chrome Version 53.0.2785.143

Browser OS version: Windows 10 64-bit

Original install method (e.g. download page, yum, from source, etc.): download page

Description of the problem including expected versus actual behavior:

Testing the new 5.0.0-rc1 stack and want to use Console (formerly Sense). I have xpack security installed and configured on the ES cluster.

When I try to run a command using Console, I get the following error:

Error connecting to '<server>':

Client request error: self signed certificate in certificate chain

In 2.4 with Shield installed, I had to add the following to kibana.yml:

sense.proxyConfig:
  - match:
      host: "*"
    ssl:
      ca: /path/to/cacert.pem

  - match:
      protocol: "https"
    ssl:
      verify: true

There have been alot of setting changes with the move to xpack in 5.0.0. I have tried to search the docs endlessly for any reference to theses settings or to Console / Sense, and only found a reference to sense.proxyFilter here: https://www.elastic.co/guide/en/kibana/5.0/securing_console.html

Also, some of the documentation seems incorrect: https://www.elastic.co/guide/en/kibana/5.0/console-kibana.html makes reference to the ability to set the server in Console, which does not seem to be possible in 5.0.0-rc1

@thomasneirynck
Copy link
Contributor

Hi @mike-mosher

Can you try replacing all sense.* configuration settings in your .yml files with console.*? The application has been renamed for the 5 release.

Thanks, indeed, the docs seem out-of-date. This will need to be addressed for the final 5.0 release.

@mike-mosher
Copy link
Author

That did it. I probably should have guessed that change. thank you for the help.

Also, seems that "defaultServerUrl" is a depreciated setting.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants