elasticsearch-HQ icon indicating copy to clipboard operation
elasticsearch-HQ copied to clipboard

docker image HQ_VERIFY_CERTS env not working

Open hariom282538 opened this issue 3 years ago • 0 comments

General information

  • docker:
  • latest:
  • es version 7.5.1:
  • docker-image:
  • chrome Version 87.0.4280.88 (Official Build) (x86_64)
  • ** just fyi es size ~30TB**

Issue Description

ElasticHQ(not on ssl) not working with elasticsearch basicAuth+selfSignedSSLCert. docker run -p 5000:5000 -e HQ_VERIFY_CERTS=False elastichq/elasticsearch-hq:latest docker run -p 5000:5000 -e HQ_VERIFY_CERTS=False elastichq/elasticsearch-hq:release-v3.5.12

Source Code / Logs

` None None 2020-12-23 09:08:18,382 INFO elastichq ConnectionService.create_connection:60 Verify: False 2020-12-23 09:08:18,383 INFO elastichq ConnectionService.create_connection:61 Cert File: None 2020-12-23 09:08:18,383 INFO elastichq ConnectionService.create_connection:93 Basic Auth is False 2020-12-23 09:08:18,384 INFO elastichq ConnectionService.create_connection:105 SSL disabled config settings.json not found, searched /etc/elastic-hq/settings.json,~/settings.json,/src/settings.json,/src/elastichq/settings.json,/src/elastichq/config/settings.json --- Logging error --- Traceback (most recent call last): File "/usr/local/lib/python3.6/site-packages/urllib3/connectionpool.py", line 601, in urlopen chunked=chunked) File "/usr/local/lib/python3.6/site-packages/urllib3/connectionpool.py", line 346, in _make_request self._validate_conn(conn) File "/usr/local/lib/python3.6/site-packages/urllib3/connectionpool.py", line 850, in validate_conn conn.connect() File "/usr/local/lib/python3.6/site-packages/urllib3/connection.py", line 326, in connect ssl_context=context) File "/usr/local/lib/python3.6/site-packages/urllib3/util/ssl.py", line 329, in ssl_wrap_socket return context.wrap_socket(sock, server_hostname=server_hostname) File "/usr/local/lib/python3.6/site-packages/eventlet/green/ssl.py", line 438, in wrap_socket return GreenSSLSocket(sock, *a, _context=self, **kw) File "/usr/local/lib/python3.6/site-packages/eventlet/green/ssl.py", line 128, in init self.do_handshake() File "/usr/local/lib/python3.6/site-packages/eventlet/green/ssl.py", line 301, in do_handshake super(GreenSSLSocket, self).do_handshake) File "/usr/local/lib/python3.6/site-packages/eventlet/green/ssl.py", line 150, in _call_trampolining return func(*a, **kw) File "/usr/local/lib/python3.6/ssl.py", line 1077, in do_handshake self._sslobj.do_handshake() File "/usr/local/lib/python3.6/ssl.py", line 689, in do_handshake self._sslobj.do_handshake() ssl.SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:852)

During handling of the above exception, another exception occurred:

Traceback (most recent call last): File "/usr/local/lib/python3.6/site-packages/requests/adapters.py", line 449, in send timeout=timeout File "/usr/local/lib/python3.6/site-packages/urllib3/connectionpool.py", line 639, in urlopen _stacktrace=sys.exc_info()[2]) File "/usr/local/lib/python3.6/site-packages/urllib3/util/retry.py", line 388, in increment raise MaxRetryError(_pool, url, error or ResponseError(cause)) urllib3.exceptions.MaxRetryError: HTTPSConnectionPool(host='10.25.19.201', port=9200): Max retries exceeded with url: / (Caused by SSLError(SSLError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:852)'),))

During handling of the above exception, another exception occurred:

Traceback (most recent call last): File "/src/elastichq/service/ConnectionService.py", line 106, in create_connection response = requests.get(scheme + "://" + ip + ":" + port, timeout=REQUEST_TIMEOUT) File "/usr/local/lib/python3.6/site-packages/requests/api.py", line 75, in get return request('get', url, params=params, **kwargs) File "/usr/local/lib/python3.6/site-packages/requests/api.py", line 60, in request return session.request(method=method, url=url, **kwargs) File "/usr/local/lib/python3.6/site-packages/requests/sessions.py", line 533, in request resp = self.send(prep, **send_kwargs) File "/usr/local/lib/python3.6/site-packages/requests/sessions.py", line 646, in send r = adapter.send(request, **kwargs) File "/usr/local/lib/python3.6/site-packages/requests/adapters.py", line 514, in send raise SSLError(e, request=request) requests.exceptions.SSLError: HTTPSConnectionPool(host='10.25.19.201', port=9200): Max retries exceeded with url: / (Caused by SSLError(SSLError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:852)'),))

`

hariom282538 avatar Dec 22 '20 21:12 hariom282538