[
https://issues.apache.org/jira/browse/KARAF-5754?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16475505#comment-16475505
]
ASF GitHub Bot commented on KARAF-5754:
---------------------------------------
xldai opened a new pull request #36: KARAF-5754 Make Decanter
elasticsearch-jest appender support HTTPS/XP…
URL: https://github.com/apache/karaf-decanter/pull/36
…ack enabled ES
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
[email protected]
> Make Decanter elasticsearch-jest appender support HTTPS/XPack enabled ES
> ------------------------------------------------------------------------
>
> Key: KARAF-5754
> URL: https://issues.apache.org/jira/browse/KARAF-5754
> Project: Karaf
> Issue Type: Improvement
> Components: decanter
> Affects Versions: decanter-2.0.0
> Reporter: Xilai Dai
> Priority: Major
>
> Now the Decanter elasticsearch-jest appender is able to connect with plain
> ES, but failed to connect with HTTPS/XPack enabled ES.
> With configuration in the
> org.apache.karaf.decanter.appender.elasticsearch.jest.cfg:
> {code:java}
> address=https://192.168.99.100:9200
> # Basic username and password authentication
> username=xxxx
> password=xxxx{code}
> Then the SSLHandshakeException will be thrown from the ElasticsearchAppender:
> {code:java}
> 2018-05-15T11:11:10,666 | WARN | EventAdminThread #20 |
> earch.jest.ElasticsearchAppender 120 | 315 -
> org.apache.karaf.decanter.appender.elasticsearch.jest - 2.0.0 | Can't append
> into Elasticsearch
> javax.net.ssl.SSLHandshakeException:
> sun.security.validator.ValidatorException: PKIX path building failed:
> sun.security.provider.certpath.SunCertPathBuilderException: unable to find
> valid certification path to requested target
> at sun.security.ssl.Alerts.getSSLException(Alerts.java:192) [?:?]
> at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1959) [?:?]
> at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:328) [?:?]
> at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:322) [?:?]
> at
> sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1614)
> [?:?]
> at
> sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:216)
> [?:?]
> at sun.security.ssl.Handshaker.processLoop(Handshaker.java:1052) [?:?]
> at sun.security.ssl.Handshaker.process_record(Handshaker.java:987) [?:?]
> at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1072)
> [?:?]
> at
> sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1385)
> [?:?]
> at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1413)
> [?:?]
> at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1397)
> [?:?]
> at
> org.apache.http.conn.ssl.SSLConnectionSocketFactory.createLayeredSocket(SSLConnectionSocketFactory.java:394)
> [315:org.apache.karaf.decanter.appender.elasticsearch.jest:2.0.0]
> at
> org.apache.http.conn.ssl.SSLConnectionSocketFactory.connectSocket(SSLConnectionSocketFactory.java:353)
> [315:org.apache.karaf.decanter.appender.elasticsearch.jest:2.0.0]
> at
> org.apache.http.impl.conn.DefaultHttpClientConnectionOperator.connect(DefaultHttpClientConnectionOperator.java:141)
> [315:org.apache.karaf.decanter.appender.elasticsearch.jest:2.0.0]
> at
> org.apache.http.impl.conn.PoolingHttpClientConnectionManager.connect(PoolingHttpClientConnectionManager.java:353)
> [315:org.apache.karaf.decanter.appender.elasticsearch.jest:2.0.0]
> at
> org.apache.http.impl.execchain.MainClientExec.establishRoute(MainClientExec.java:380)
> [315:org.apache.karaf.decanter.appender.elasticsearch.jest:2.0.0]
> at
> org.apache.http.impl.execchain.MainClientExec.execute(MainClientExec.java:236)
> [315:org.apache.karaf.decanter.appender.elasticsearch.jest:2.0.0]
> at
> org.apache.http.impl.execchain.ProtocolExec.execute(ProtocolExec.java:184)
> [315:org.apache.karaf.decanter.appender.elasticsearch.jest:2.0.0]
> at org.apache.http.impl.execchain.RetryExec.execute(RetryExec.java:88)
> [315:org.apache.karaf.decanter.appender.elasticsearch.jest:2.0.0]
> at
> org.apache.http.impl.execchain.RedirectExec.execute(RedirectExec.java:110)
> [315:org.apache.karaf.decanter.appender.elasticsearch.jest:2.0.0]
> at
> org.apache.http.impl.client.InternalHttpClient.doExecute(InternalHttpClient.java:184)
> [315:org.apache.karaf.decanter.appender.elasticsearch.jest:2.0.0]
> at
> org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:82)
> [315:org.apache.karaf.decanter.appender.elasticsearch.jest:2.0.0]
> at
> org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:107)
> [315:org.apache.karaf.decanter.appender.elasticsearch.jest:2.0.0]
> at
> io.searchbox.client.http.JestHttpClient.execute(JestHttpClient.java:47)
> [315:org.apache.karaf.decanter.appender.elasticsearch.jest:2.0.0]
> at
> org.apache.karaf.decanter.appender.elasticsearch.jest.ElasticsearchAppender.send(ElasticsearchAppender.java:128)
> [315:org.apache.karaf.decanter.appender.elasticsearch.jest:2.0.0]
> at
> org.apache.karaf.decanter.appender.elasticsearch.jest.ElasticsearchAppender.handleEvent(ElasticsearchAppender.java:118)
> [315:org.apache.karaf.decanter.appender.elasticsearch.jest:2.0.0]
> at
> org.apache.felix.eventadmin.impl.handler.EventHandlerProxy.sendEvent(EventHandlerProxy.java:415)
> [3:org.apache.karaf.services.eventadmin:4.1.5]
> at
> org.apache.felix.eventadmin.impl.tasks.HandlerTask.run(HandlerTask.java:70)
> [3:org.apache.karaf.services.eventadmin:4.1.5]
> at
> java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511) [?:?]
> at java.util.concurrent.FutureTask.run(FutureTask.java:266) [?:?]
> at
> java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
> [?:?]
> at
> java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
> [?:?]
> at java.lang.Thread.run(Thread.java:748) [?:?]
> Caused by: sun.security.validator.ValidatorException: PKIX path building
> failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to
> find valid certification path to requested target
> at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:397)
> ~[?:?]
> at
> sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:302)
> ~[?:?]
> at sun.security.validator.Validator.validate(Validator.java:260) ~[?:?]
> at
> sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:324)
> ~[?:?]
> at
> sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:229)
> ~[?:?]
> at
> sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:124)
> ~[?:?]
> at
> sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1596)
> ~[?:?]
> ... 29 more
> Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable
> to find valid certification path to requested target
> at
> sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:141)
> ~[?:?]
> at
> sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:126)
> ~[?:?]
> at java.security.cert.CertPathBuilder.build(CertPathBuilder.java:280)
> ~[?:?]
> at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:392)
> ~[?:?]
> at
> sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:302)
> ~[?:?]
> at sun.security.validator.Validator.validate(Validator.java:260) ~[?:?]
> at
> sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:324)
> ~[?:?]
> at
> sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:229)
> ~[?:?]
> at
> sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:124)
> ~[?:?]
> at
> sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1596)
> ~[?:?]
> ... 29 more{code}
> The ElasticsearchAppender need to be enhanced to support XPack secured ES.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
