{"action":"closed","issue":{"url":"https://api.github.com/repos/elastic/sense/issues/69","repository_url":"https://api.github.com/repos/elastic/sense","labels_url":"https://api.github.com/repos/elastic/sense/issues/69/labels{/name}","comments_url":"https://api.github.com/repos/elastic/sense/issues/69/comments","events_url":"https://api.github.com/repos/elastic/sense/issues/69/events","html_url":"https://github.com/elastic/sense/issues/69","id":113799539,"number":69,"title":"Sense fails with SSL (using own RootCA)","user":{"login":"nellicus","id":8770097,"avatar_url":"https://avatars.githubusercontent.com/u/8770097?v=3","gravatar_id":"","url":"https://api.github.com/users/nellicus","html_url":"https://github.com/nellicus","followers_url":"https://api.github.com/users/nellicus/followers","following_url":"https://api.github.com/users/nellicus/following{/other_user}","gists_url":"https://api.github.com/users/nellicus/gists{/gist_id}","starred_url":"https://api.github.com/users/nellicus/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/nellicus/subscriptions","organizations_url":"https://api.github.com/users/nellicus/orgs","repos_url":"https://api.github.com/users/nellicus/repos","events_url":"https://api.github.com/users/nellicus/events{/privacy}","received_events_url":"https://api.github.com/users/nellicus/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/elastic/sense/labels/bug","name":"bug","color":"fc2929"},{"url":"https://api.github.com/repos/elastic/sense/labels/v2.0.0","name":"v2.0.0","color":"bfd4f2"}],"state":"closed","locked":false,"assignee":{"login":"spalger","id":1329312,"avatar_url":"https://avatars.githubusercontent.com/u/1329312?v=3","gravatar_id":"","url":"https://api.github.com/users/spalger","html_url":"https://github.com/spalger","followers_url":"https://api.github.com/users/spalger/followers","following_url":"https://api.github.com/users/spalger/following{/other_user}","gists_url":"https://api.github.com/users/spalger/gists{/gist_id}","starred_url":"https://api.github.com/users/spalger/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/spalger/subscriptions","organizations_url":"https://api.github.com/users/spalger/orgs","repos_url":"https://api.github.com/users/spalger/repos","events_url":"https://api.github.com/users/spalger/events{/privacy}","received_events_url":"https://api.github.com/users/spalger/received_events","type":"User","site_admin":false},"milestone":null,"comments":13,"created_at":"2015-10-28T11:38:05Z","updated_at":"2016-03-11T06:20:04Z","closed_at":"2016-03-11T06:20:04Z","body":"Using 4.2 kibana snapshot with config\r\n\r\n```\r\nabonuccelli@w530 /opt/elk/PRODSEC/kibana/kibana-4.2.0-snapshot-linux-x64 $ egrep '^[^#]' config/kibana.yml \r\nserver.host: \"0.0.0.0\"\r\nelasticsearch.url: \"https://localhost:9200\"\r\nelasticsearch.username: kibana_server_user\r\nelasticsearch.password: r1ng3r\r\nelasticsearch.ssl.ca: /opt/elk/PRODSEC/FS/secure/cacert.pem\r\nelasticsearch.ssl.verify: true\r\nlogging.verbose: true\r\n```\r\n\r\nRootCa cert\r\n```\r\nabonuccelli@w530 /opt/elk/PRODSEC/kibana/kibana-4.2.0-snapshot-linux-x64 $ openssl x509 -in /opt/elk/PRODSEC/FS/secure/cacert.pem -inform pem -noout -text\r\nCertificate:\r\n    Data:\r\n        Version: 3 (0x2)\r\n        Serial Number: 18411508252604821347 (0xff82d13517aeef63)\r\n    Signature Algorithm: sha256WithRSAEncryption\r\n        Issuer: CN=\"Tony-Secure-CA\"\r\n        Validity\r\n            Not Before: Sep 29 11:11:46 2015 GMT\r\n            Not After : Sep 26 11:11:46 2025 GMT\r\n        Subject: CN=\"Tony-Secure-CA\"\r\n        Subject Public Key Info:\r\n            Public Key Algorithm: rsaEncryption\r\n                Public-Key: (2048 bit)\r\n                Modulus:\r\n                    00:c9:10:af:e5:f4:30:5f:78:b8:7c:ec:a8:3c:ac:\r\n                    bb:4f:c8:d8:ef:83:1d:44:15:7a:80:a6:c4:e9:b2:\r\n                    59:bb:0f:3e:26:d8:32:8a:48:ce:f7:60:28:a4:b2:\r\n                    e2:55:23:e8:36:1c:a1:ac:6f:33:9f:8a:34:c2:af:\r\n                    f1:cb:d1:6d:a7:f9:3d:05:68:f3:68:cc:d1:ca:db:\r\n                    af:3d:5f:a5:73:d8:03:5f:39:65:b0:cc:4d:54:43:\r\n                    af:1e:66:23:6f:9b:29:ba:2b:4d:a9:b8:85:73:f9:\r\n                    b1:8c:ea:62:d9:8a:18:15:b4:7d:f5:71:48:c5:60:\r\n                    5e:ac:b6:6c:a7:e7:3f:93:82:22:5b:21:52:f5:3c:\r\n                    e6:c5:d4:ff:55:f7:2a:19:3c:d4:c2:b8:04:3d:4d:\r\n                    e7:1c:64:c7:a4:3d:28:1d:2f:82:d0:62:4b:4a:02:\r\n                    71:80:26:f9:20:de:5e:7c:9b:b0:f4:e9:f8:21:e9:\r\n                    44:7a:62:bb:33:cb:0e:50:a8:70:23:34:10:7d:ac:\r\n                    ca:0a:0f:7e:86:53:ec:97:99:ad:c8:08:ed:ca:d0:\r\n                    68:03:8b:a3:bc:f6:de:da:4a:8a:de:34:70:fa:6c:\r\n                    a1:eb:50:37:b1:1f:5b:bc:80:a0:60:21:94:1e:9a:\r\n                    7d:f8:a2:f4:67:c2:5c:ee:d8:fb:15:84:1b:0c:3b:\r\n                    06:db\r\n                Exponent: 65537 (0x10001)\r\n        X509v3 extensions:\r\n            X509v3 Basic Constraints: \r\n                CA:TRUE\r\n            X509v3 Subject Key Identifier: \r\n                CE:F3:A7:6E:CC:1A:F2:1E:D5:41:9C:00:48:DC:2B:4C:6C:98:8C:33\r\n            X509v3 Authority Key Identifier: \r\n                keyid:CE:F3:A7:6E:CC:1A:F2:1E:D5:41:9C:00:48:DC:2B:4C:6C:98:8C:33\r\n                DirName:/CN=\"Tony-Secure-CA\"\r\n                serial:FF:82:D1:35:17:AE:EF:63\r\n\r\n    Signature Algorithm: sha256WithRSAEncryption\r\n         8f:bd:46:55:dd:c4:4a:9f:d3:a7:47:78:7d:40:50:59:99:d3:\r\n         08:cf:0c:e9:dc:14:89:6e:5b:34:de:63:d8:84:9c:78:95:a5:\r\n         a7:3c:5d:93:90:ea:f6:72:ed:a3:1e:59:7a:d9:7b:36:a2:2a:\r\n         d4:1b:bc:a1:d6:4f:be:44:5a:cd:50:7a:ae:77:30:69:80:54:\r\n         61:09:c7:5e:d2:08:71:ed:d1:6a:42:87:ae:b4:fb:35:24:d9:\r\n         97:dd:a8:44:2a:79:3a:d4:b8:e1:8f:39:25:8a:7e:8b:bd:a9:\r\n         88:24:2e:0d:88:4a:3d:ef:dd:9f:e6:7c:f2:aa:17:9a:c9:c1:\r\n         d3:09:1b:50:8f:f3:3f:fc:fe:a6:c1:5c:56:4f:62:f3:00:7e:\r\n         bc:48:37:4c:ac:a3:8f:30:d7:9e:bb:91:c2:52:69:f0:8f:da:\r\n         27:78:b2:b2:34:60:7c:1f:54:d3:0e:35:0f:a5:fa:73:d1:f4:\r\n         65:9a:ed:a0:bf:fa:65:b1:43:9f:96:e8:91:dc:14:35:11:46:\r\n         7e:02:e1:03:66:7b:06:82:c9:56:52:8e:04:7f:e1:45:48:73:\r\n         05:1d:c5:81:34:d0:96:ed:e7:a3:e9:76:10:e1:f5:f0:c2:d5:\r\n         0e:aa:0a:db:66:82:79:b9:58:ce:3e:c0:3d:42:e0:8f:14:7d:\r\n         85:b2:46:ee\r\n```\r\ngenerated as per https://www.elastic.co/guide/en/shield/current/certificate-authority.html\r\n\r\n\r\n\r\n\r\n\r\n\r\n"}}