TLS CLIENT ALERT: Fatal - Unknown CA
Closed this issue · 2 comments
Sadique-The-Alchemist commented
mix elasticsearch.build posts --cluster Elastic.ElasticsearchCluster
responds
** (Mix) Index posts could not be created.
%HTTPoison.Error{reason: {:tls_alert, {:unknown_ca, 'TLS client: In state wait_cert_cr at ssl_handshake.erl:2109 generated CLIENT ALERT: Fatal - Unknown CA\n'}}, id: nil}
Sadique-The-Alchemist commented
I installed Elastic Search through Docker and it's initial REST API call to ensure Elastic Search properly installed was
curl --cacert http_ca.crt -u elastic:$ELASTIC_PASSWORD https://localhost:9200
.
The mix elasticsearch.build
command does not support --cacert
as option
lovebes commented
If you're using OTP26 - https://www.erlang.org/blog/otp-26-highlights/#ssl-safer-defaults
Try this in your config:
config :my_app, MyApp.Elasticsearch.Cluster,
enabled: false,
default_options: [
ssl: [{:verify, :verify_none}] #<=== this line
],
api: Elasticsearch.API.HTTP,
json_library: Jason
I followed the docker compose file setup for cluster, and this seems to work.