Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Elasticsearch - Skip certificate validation #327

Open
11qu1d opened this issue Jun 16, 2024 · 0 comments
Open

Elasticsearch - Skip certificate validation #327

11qu1d opened this issue Jun 16, 2024 · 0 comments

Comments

@11qu1d
Copy link

11qu1d commented Jun 16, 2024

Hi,

Not sure if this is the right place to raise this issue, please point me to the right place if mistaken.

We are facing an issue with connecting to Elasticsearch. Our ES cluster is currently using self-signed certificates to secure the connection via HTTPS. This causes issue when seafevents tries to connect with below error:

06/16/2024 23:05:41 [ERROR] seafes:158 start_index_local: Index process init error: TLS error caused by: TlsError(TLS error caused by: SSLError([SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate in certificate chain (_ssl.c:1007))).

I have tried using the below in seafevents.conf but still getting the same error:

[INDEX FILES]
.
.
.
verify_certs = false
cafile = /shared/seafile/conf/es_cacert.pem

I am not sure if these are even used in the code. It should be a relatively easy fix to allow disabling cert verification and expose it as a config parameter.

Version details below:
Seafile version: 11.0.7 Pro (Docker - HA cluster)

Thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant