启用xpack后，弹性搜索失败。

Question

我试图在elasticsearch中启用xpack，并跟踪elasticsearch站点的入门博客文章。

我做的事：：

1. 我运行了这个命令$/usr/share/elasticsearch/elasticsearch-certutil cert -out config/elastic-certificates.p12 -pass ""，并在被要求输入所需的输出文件时输入了/etc/elasticsearch/elastic-certificates.p12。

1. 编辑了位于/etc/elasticsearch/elasticsearch.yml的elasticsearch.yml配置文件，并输入了以下行：

xpack.security.transport.ssl.verification_mode：：xpack.security.transport.ssl.keystore.path: /etc/弹性证书。p12 xpack.security.transport.ssl.truststore.path: /etc/elastic-certificates.p12

来自/var/log/elasticsearch/elasticsearch.log的日志/异常

2021-06-10T02:58:12,542][ERROR][o.e.b.ElasticsearchUncaughtExceptionHandler] [node-1] uncaught exception in thread [main]
org.elasticsearch.bootstrap.StartupException: ElasticsearchSecurityException[failed to load SSL configuration [xpack.security.transport.ssl]]; nested:
 ElasticsearchException[failed to create trust manager]; nested: ElasticsearchException[failed to initialize SSL TrustManager - keystore file [/etc/el
asticsearch/elastic-certificates.p12] does not exist]; nested: AccessDeniedException[/etc/elasticsearch/elastic-certificates.p12];

Caused by: org.elasticsearch.ElasticsearchSecurityException: failed to load SSL configuration [xpack.security.transport.ssl]

Caused by: java.nio.file.AccessDeniedException: /etc/elasticsearch/elastic-certificates.p12

Caused by: java.nio.file.AccessDeniedException: /etc/elasticsearch/elastic-certificates.p12

Caused by: java.nio.file.AccessDeniedException: /etc/elasticsearch/elastic-certificates.p12

我的.p12证书文件的权限是rw-------

我在这里错过了什么？

我一行行地跟踪了文档

Answer 1

您在elasticsearch.yml中的路径是错误的。

xpack.security.enabled: true
xpack.security.transport.ssl.enabled: true
xpack.security.transport.ssl.verification_mode: certificate
xpack.security.transport.ssl.keystore.path: /etc/elastic-certificates.p12
xpack.security.transport.ssl.truststore.path: /etc/elastic-certificates.p12

如果将证书放置在/etc/elasticsearch文件夹中，则更正它。

xpack.security.enabled: true
xpack.security.transport.ssl.enabled: true
xpack.security.transport.ssl.verification_mode: certificate
xpack.security.transport.ssl.keystore.path: elastic-certificates.p12
xpack.security.transport.ssl.truststore.path: elastic-certificates.p12

还要确保证书的所有者是root:elasticsearch

sudo chown root:elasticsearch /etc/elasticsearch/elastic-c*

Answer 2

我得到了完全相同的错误，因为我在elasticsearch.yml文件中有一些剩余的文件，是的，为了安全起见，这些行是上次运行时遗留下来的。

若要重新运行Elasticsearch (这对Windows 10版本8.4.1版的Elasticsearch有效)并消除此问题，请转到安装它的主Elasticsearch文件夹：

删除数据并验证folders.

• Delete .\bin\elasticsearch.bat

文件。

• 通过删除生成的行编辑elasticsearch.yml文件，并保留注释(默认)。

• I还删除日志文件夹下的所有日志文件以清理事情。

• 从命令提示符窗口重新运行启动elasticsearch的命令：.\bin\elasticsearch.bat

：