2016-11-22 3 views
2

J'ai configuré Elasticsearch, Kibana et X-pack conformément aux directives d'installation et vérifié que tout fonctionnait correctement. Maintenant, je veux envoyer un rapport Kibana en utilisant Watchers dans X-Pack. J'ai suivi this tutorial à la configuration des rapports sécurisé, mais après avoir ajouté le truststore de veilleur à elasticsarch.yml Je reçois ce message d'erreur lorsque je tente de démarrer élastique:X-pack n'a pas réussi à initialiser une TrustManagerFactory

[2016-11-22T12:19:57,111][INFO ][o.e.e.NodeEnvironment ] [CBeNcdh] using [1] data paths, mounts [[OS (c:)]], net usable_space [72.3gb], net total_space [223.5gb], spins? [unknown], types [NTFS] 
[2016-11-22T12:19:57,115][INFO ][o.e.e.NodeEnvironment ] [CBeNcdh] heap size [1.9gb], compressed ordinary object pointers [true] 
[2016-11-22T12:19:57,354][INFO ][o.e.n.Node    ] [CBeNcdh] node name [CBeNcdh] derived from node ID; set [node.name] to override 
[2016-11-22T12:19:57,358][INFO ][o.e.n.Node    ] [CBeNcdh] version[5.0.1], pid[15948], build[080bb47/2016-11-11T22:08:49.812Z], OS[Windows 10/10.0/amd64], JVM[Oracle Corporation/Java HotSpot(TM) 64-Bit Server VM/1.8.0_111/25.111-b14] 
[2016-11-22T12:19:58,618][ERROR][o.e.b.Bootstrap   ] Exception 
org.elasticsearch.ElasticsearchException: Failed to load plugin class [org.elasticsearch.xpack.XPackPlugin] 
    at org.elasticsearch.plugins.PluginsService.loadPlugin(PluginsService.java:462) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.plugins.PluginsService.loadBundles(PluginsService.java:414) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.plugins.PluginsService.<init>(PluginsService.java:144) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.node.Node.<init>(Node.java:281) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.node.Node.<init>(Node.java:220) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.bootstrap.Bootstrap$5.<init>(Bootstrap.java:191) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.bootstrap.Bootstrap.setup(Bootstrap.java:191) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:286) [elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:112) [elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.bootstrap.Elasticsearch.execute(Elasticsearch.java:103) [elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.cli.SettingCommand.execute(SettingCommand.java:54) [elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:96) [elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.cli.Command.main(Command.java:62) [elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:80) [elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:73) [elasticsearch-5.0.1.jar:5.0.1] 
Caused by: java.lang.reflect.InvocationTargetException 
    at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method) ~[?:?] 
    at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:62) ~[?:?] 
    at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45) ~[?:?] 
    at java.lang.reflect.Constructor.newInstance(Constructor.java:423) ~[?:1.8.0_111] 
    at org.elasticsearch.plugins.PluginsService.loadPlugin(PluginsService.java:451) ~[elasticsearch-5.0.1.jar:5.0.1] 
    ... 14 more 
Caused by: org.elasticsearch.ElasticsearchException: failed to initialize a TrustManagerFactory 
    at org.elasticsearch.xpack.ssl.StoreTrustConfig.createTrustManager(StoreTrustConfig.java:57) ~[?:?] 
    at org.elasticsearch.xpack.ssl.SSLService.createSslContext(SSLService.java:387) ~[?:?] 
    at org.elasticsearch.xpack.ssl.SSLService.loadSSLConfigurations(SSLService.java:423) ~[?:?] 
    at org.elasticsearch.xpack.ssl.SSLService.<init>(SSLService.java:78) ~[?:?] 
    at org.elasticsearch.xpack.XPackPlugin.<init>(XPackPlugin.java:181) ~[?:?] 
    at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method) ~[?:?] 
    at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:62) ~[?:?] 
    at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45) ~[?:?] 
    at java.lang.reflect.Constructor.newInstance(Constructor.java:423) ~[?:1.8.0_111] 
    at org.elasticsearch.plugins.PluginsService.loadPlugin(PluginsService.java:451) ~[elasticsearch-5.0.1.jar:5.0.1] 
    ... 14 more 
Caused by: java.security.AccessControlException: access denied ("java.io.FilePermission" "C:\tmp\watcher-truststore.jks" "read") 
    at java.security.AccessControlContext.checkPermission(AccessControlContext.java:472) ~[?:1.8.0_111] 
    at java.security.AccessController.checkPermission(AccessController.java:884) ~[?:1.8.0_111] 
    at java.lang.SecurityManager.checkPermission(SecurityManager.java:549) ~[?:1.8.0_111] 
    at java.lang.SecurityManager.checkRead(SecurityManager.java:888) ~[?:1.8.0_111] 
    at sun.nio.fs.WindowsChannelFactory.open(WindowsChannelFactory.java:293) ~[?:?] 
    at sun.nio.fs.WindowsChannelFactory.newFileChannel(WindowsChannelFactory.java:162) ~[?:?] 
    at sun.nio.fs.WindowsFileSystemProvider.newByteChannel(WindowsFileSystemProvider.java:225) ~[?:?] 
    at java.nio.file.Files.newByteChannel(Files.java:361) ~[?:1.8.0_111] 
    at java.nio.file.Files.newByteChannel(Files.java:407) ~[?:1.8.0_111] 
    at java.nio.file.spi.FileSystemProvider.newInputStream(FileSystemProvider.java:384) ~[?:1.8.0_111] 
    at java.nio.file.Files.newInputStream(Files.java:152) ~[?:1.8.0_111] 
    at org.elasticsearch.xpack.ssl.CertUtils.trustManager(CertUtils.java:162) ~[?:?] 
    at org.elasticsearch.xpack.ssl.StoreTrustConfig.createTrustManager(StoreTrustConfig.java:55) ~[?:?] 
    at org.elasticsearch.xpack.ssl.SSLService.createSslContext(SSLService.java:387) ~[?:?] 
    at org.elasticsearch.xpack.ssl.SSLService.loadSSLConfigurations(SSLService.java:423) ~[?:?] 
    at org.elasticsearch.xpack.ssl.SSLService.<init>(SSLService.java:78) ~[?:?] 
    at org.elasticsearch.xpack.XPackPlugin.<init>(XPackPlugin.java:181) ~[?:?] 
    at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method) ~[?:?] 
    at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:62) ~[?:?] 
    at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45) ~[?:?] 
    at java.lang.reflect.Constructor.newInstance(Constructor.java:423) ~[?:1.8.0_111] 
    at org.elasticsearch.plugins.PluginsService.loadPlugin(PluginsService.java:451) ~[elasticsearch-5.0.1.jar:5.0.1] 
    ... 14 more 
[2016-11-22T12:19:58,626][WARN ][o.e.b.ElasticsearchUncaughtExceptionHandler] [] uncaught exception in thread [main] 
org.elasticsearch.bootstrap.StartupException: ElasticsearchException[Failed to load plugin class [org.elasticsearch.xpack.XPackPlugin]]; nested: InvocationTargetException; nested: ElasticsearchException[failed to initialize a TrustManagerFactory]; nested: AccessControlException[access denied ("java.io.FilePermission" "C:\tmp\watcher-truststore.jks" "read")]; 
    at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:116) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.bootstrap.Elasticsearch.execute(Elasticsearch.java:103) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.cli.SettingCommand.execute(SettingCommand.java:54) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:96) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.cli.Command.main(Command.java:62) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:80) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:73) ~[elasticsearch-5.0.1.jar:5.0.1] 
Caused by: org.elasticsearch.ElasticsearchException: Failed to load plugin class [org.elasticsearch.xpack.XPackPlugin] 
    at org.elasticsearch.plugins.PluginsService.loadPlugin(PluginsService.java:462) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.plugins.PluginsService.loadBundles(PluginsService.java:414) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.plugins.PluginsService.<init>(PluginsService.java:144) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.node.Node.<init>(Node.java:281) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.node.Node.<init>(Node.java:220) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.bootstrap.Bootstrap$5.<init>(Bootstrap.java:191) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.bootstrap.Bootstrap.setup(Bootstrap.java:191) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:286) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:112) ~[elasticsearch-5.0.1.jar:5.0.1] 
    ... 6 more 
Caused by: java.lang.reflect.InvocationTargetException 
    at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method) ~[?:?] 
    at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:62) ~[?:?] 
    at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45) ~[?:?] 
    at java.lang.reflect.Constructor.newInstance(Constructor.java:423) ~[?:1.8.0_111] 
    at org.elasticsearch.plugins.PluginsService.loadPlugin(PluginsService.java:451) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.plugins.PluginsService.loadBundles(PluginsService.java:414) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.plugins.PluginsService.<init>(PluginsService.java:144) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.node.Node.<init>(Node.java:281) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.node.Node.<init>(Node.java:220) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.bootstrap.Bootstrap$5.<init>(Bootstrap.java:191) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.bootstrap.Bootstrap.setup(Bootstrap.java:191) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:286) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:112) ~[elasticsearch-5.0.1.jar:5.0.1] 
    ... 6 more 
Caused by: org.elasticsearch.ElasticsearchException: failed to initialize a TrustManagerFactory 
    at org.elasticsearch.xpack.ssl.StoreTrustConfig.createTrustManager(StoreTrustConfig.java:57) ~[?:?] 
    at org.elasticsearch.xpack.ssl.SSLService.createSslContext(SSLService.java:387) ~[?:?] 
    at org.elasticsearch.xpack.ssl.SSLService.loadSSLConfigurations(SSLService.java:423) ~[?:?] 
    at org.elasticsearch.xpack.ssl.SSLService.<init>(SSLService.java:78) ~[?:?] 
    at org.elasticsearch.xpack.XPackPlugin.<init>(XPackPlugin.java:181) ~[?:?] 
    at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method) ~[?:?] 
    at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:62) ~[?:?] 
    at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45) ~[?:?] 
    at java.lang.reflect.Constructor.newInstance(Constructor.java:423) ~[?:1.8.0_111] 
    at org.elasticsearch.plugins.PluginsService.loadPlugin(PluginsService.java:451) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.plugins.PluginsService.loadBundles(PluginsService.java:414) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.plugins.PluginsService.<init>(PluginsService.java:144) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.node.Node.<init>(Node.java:281) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.node.Node.<init>(Node.java:220) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.bootstrap.Bootstrap$5.<init>(Bootstrap.java:191) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.bootstrap.Bootstrap.setup(Bootstrap.java:191) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:286) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:112) ~[elasticsearch-5.0.1.jar:5.0.1] 
    ... 6 more 
Caused by: java.security.AccessControlException: access denied ("java.io.FilePermission" "C:\tmp\watcher-truststore.jks" "read") 
    at java.security.AccessControlContext.checkPermission(AccessControlContext.java:472) ~[?:1.8.0_111] 
    at java.security.AccessController.checkPermission(AccessController.java:884) ~[?:1.8.0_111] 
    at java.lang.SecurityManager.checkPermission(SecurityManager.java:549) ~[?:1.8.0_111] 
    at java.lang.SecurityManager.checkRead(SecurityManager.java:888) ~[?:1.8.0_111] 
    at sun.nio.fs.WindowsChannelFactory.open(WindowsChannelFactory.java:293) ~[?:?] 
    at sun.nio.fs.WindowsChannelFactory.newFileChannel(WindowsChannelFactory.java:162) ~[?:?] 
    at sun.nio.fs.WindowsFileSystemProvider.newByteChannel(WindowsFileSystemProvider.java:225) ~[?:?] 
    at java.nio.file.Files.newByteChannel(Files.java:361) ~[?:1.8.0_111] 
    at java.nio.file.Files.newByteChannel(Files.java:407) ~[?:1.8.0_111] 
    at java.nio.file.spi.FileSystemProvider.newInputStream(FileSystemProvider.java:384) ~[?:1.8.0_111] 
    at java.nio.file.Files.newInputStream(Files.java:152) ~[?:1.8.0_111] 
    at org.elasticsearch.xpack.ssl.CertUtils.trustManager(CertUtils.java:162) ~[?:?] 
    at org.elasticsearch.xpack.ssl.StoreTrustConfig.createTrustManager(StoreTrustConfig.java:55) ~[?:?] 
    at org.elasticsearch.xpack.ssl.SSLService.createSslContext(SSLService.java:387) ~[?:?] 
    at org.elasticsearch.xpack.ssl.SSLService.loadSSLConfigurations(SSLService.java:423) ~[?:?] 
    at org.elasticsearch.xpack.ssl.SSLService.<init>(SSLService.java:78) ~[?:?] 
    at org.elasticsearch.xpack.XPackPlugin.<init>(XPackPlugin.java:181) ~[?:?] 
    at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method) ~[?:?] 
    at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:62) ~[?:?] 
    at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45) ~[?:?] 
    at java.lang.reflect.Constructor.newInstance(Constructor.java:423) ~[?:1.8.0_111] 
    at org.elasticsearch.plugins.PluginsService.loadPlugin(PluginsService.java:451) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.plugins.PluginsService.loadBundles(PluginsService.java:414) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.plugins.PluginsService.<init>(PluginsService.java:144) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.node.Node.<init>(Node.java:281) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.node.Node.<init>(Node.java:220) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.bootstrap.Bootstrap$5.<init>(Bootstrap.java:191) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.bootstrap.Bootstrap.setup(Bootstrap.java:191) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:286) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:112) ~[elasticsearch-5.0.1.jar:5.0.1] 
    ... 6 more 

Je suis en cours d'exécution cmd en tant qu'administrateur et le fichier truststore ont les autorisations nécessaires pour élastique pour le lire. Je ne comprends pas pourquoi cette erreur se produit, quelqu'un peut-il m'aider s'il vous plaît?

Ce sont les options ont été ajoutées à mon dossier elasticsearch.yml:

xpack.security.http.ssl.truststore.path: C:\tmp\watcher-truststore.jks 
xpack.security.http.ssl.truststore.password: <truststorepw> 

Et mon dossier kibana.yml:

server.ssl.key: C:\tmp\kibana.local.key 
server.ssl.cert: C:\tmp\kibana.local.crt 

xpack.security.encryptionKey: "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" 

Si je supprime les paramètres de trustStore de elasticsearch.yml, je peux commencer à la fois élastique et kibana et kibana fonctionne sur https.

Répondre

5

J'ai posté this question au forum Elsticsearch ainsi obtenu et la réponse à mon problème là-bas:

ElasticSearch fonctionne sous un gestionnaire de sécurité avec un ensemble restreint de répertoires qui peut être lu. Les fichiers de clés et les certificats doivent être stockés dans le répertoire de configuration et peuvent être placés dans un sous-répertoire si désiré