title: unable to find valid certification path to requested target logstash
body: <p>I am enabling ssl on our elk stack and I am encountering an error message when connecting logstash to elasticsearch.</p>
  
  <p>`</p>
  
  <pre><code>enter code here`2019-08-29T13:38:43,822][WARN ][logstash.outputs.elasticsearch] Attempted to resurrect connection to dead ES instance, but got an error. {:url=&gt;"https://logstash_internal:xxxxxx@elastic.local:9200/", :error_type=&gt;LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError, :error=&gt;"Elasticsearch Unreachable: [https://logstash_internal:xxxxxx@elastic.local:9200/][Manticore::ClientProtocolException] PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target"
  
  The self signed certificate is installed in the trusted on the local machine. If you know what is causing the issue and how to resolve let me know.
  
  my logstash config is
  
  output {
  elasticsearch {
  hosts =&gt; ["https://elastic.local:9200"]
  index =&gt; "logstash-%{+YYYY.MM.dd}"
  ssl =&gt; true
  keystore =&gt; '\config\logstash.keystore'
  keystore_password =&gt; "keystore.pass"
  cacert =&gt; '\config\certs\instance.crt'
  ssl_certificate_verification =&gt; true
  user =&gt; "{ES_USER}" password =&gt; "{ES_PWD}"
  }
  stdout { codec =&gt; rubydebug }
  </code></pre>
  
  <p>}</p>
  
  <p>Any assistance would be much appreciated in getting this error resolved </p>