Issue with self-signed certificates

[jstoja]

Hello,

I'm having troubled with self-signed certificate, but also using my own CA. Each time I get the following: [2017-12-04T16:41:50,264][ERROR][logstash.inputs.beats ] Looks like you either have a bad certificate, an invalid key or your private key was not in PKCS8 format.

Even if the key is with the right format. I also checked with openssl and the crt/key pair is correct... Any idea how it's possible ?

For all general issues, please provide the following details for fast resolution:

• Version: 6.0.0
• Operating System: Debian Stretch
• Config :

  input {
  beats {
  port            => 5043
  ssl             => true
  # ssl_verify_mode => "peer" # I also tried with those...
  # ssl_certificate_authorities => ['/etc/ssl/logstash/logstash.crt']
  ssl_certificate => '/etc/ssl/logstash/logstash.crt'
  ssl_key         => '/etc/ssl/logstash/logstash.key'
  tags            => ['beats']
  }
  }

• Steps to Reproduce: I used this https://github.com/Busindre/How-to-configure-SSL-for-FileBeat-and-Logstash-step-by-step that is pretty recent, but I still get an error when trying with curl -v --cacert ca.crt https://localhost:5043/.

[jstoja]

Probably specific to Beats Input plugin to (cf issue https://github.com/logstash-plugins/logstash-input-beats/issues/197)

[peksilli]

Same problem here, following the same instructions. CRT matches with key pair, OpenSSL 1.0.2g 1 Mar 2016.