elastalert icon indicating copy to clipboard operation
elastalert copied to clipboard

Could not find a suitable TLS CA certificate bundle, invalid path: /usr/local/share/ca-certificates/ca.crt

Open vas-rus opened this issue 5 years ago • 0 comments

I am attempting to connect to an ES cluster over TLS from and the connection fails because the TLS certificate can not be verified. I have placed them inside docker and still getting this error. Following is my DockerFile

COPY config/server-cert.crt /usr/local/share/ca-certificates/server-cert.crt
COPY config/server-cert.key /usr/local/share/ca-certificates/server-cert.key
COPY config/ca.crt /usr/local/share/ca-certificates/ca.crt
COPY config/trustedca.crt /usr/local/share/ca-certificates/trustedca.crt
COPY rule_templates/ /opt/elastalert/rule_templates
COPY elastalert_modules/ /opt/elastalert/elastalert_modules
RUN chmod 644 /usr/local/share/ca-certificates/trustedca.crt
RUN chmod 644 /usr/local/share/ca-certificates/server-cert.crt
RUN chmod 644 /usr/local/share/ca-certificates/server-cert.key
RUN chmod 644 /usr/local/share/ca-certificates/ca.crt
RUN  update-ca-certificates

And following is Elastalert config

use_ssl: True

verify_certs: True

client_cert: /usr/local/share/ca-certificates/server-cert.crt

client_key: /usr/local/share/ca-certificates/server-cert.key

ca_certs: /usr/local/share/ca-certificates/ca.crt

Can someone help me here

vas-rus avatar Apr 09 '20 14:04 vas-rus