2016-11-22 18 views
2

インストールガイドラインに従ってElasticsearch、Kibana、およびX-packをセットアップし、期待どおりに機能することを確認しました。 今、X-PackのWatchersを使用してKibanaレポートを送信したいと思います。私はセットアップセキュアな報告にthis tutorialを踏襲しているが、私は弾性開始しようとするとelasticsarch.ymlするウォッチャートラストストアを追加した後、私は、このエラーメッセージが表示されます:X-packがTrustManagerFactoryの初期化に失敗しました

[2016-11-22T12:19:57,111][INFO ][o.e.e.NodeEnvironment ] [CBeNcdh] using [1] data paths, mounts [[OS (c:)]], net usable_space [72.3gb], net total_space [223.5gb], spins? [unknown], types [NTFS] 
[2016-11-22T12:19:57,115][INFO ][o.e.e.NodeEnvironment ] [CBeNcdh] heap size [1.9gb], compressed ordinary object pointers [true] 
[2016-11-22T12:19:57,354][INFO ][o.e.n.Node    ] [CBeNcdh] node name [CBeNcdh] derived from node ID; set [node.name] to override 
[2016-11-22T12:19:57,358][INFO ][o.e.n.Node    ] [CBeNcdh] version[5.0.1], pid[15948], build[080bb47/2016-11-11T22:08:49.812Z], OS[Windows 10/10.0/amd64], JVM[Oracle Corporation/Java HotSpot(TM) 64-Bit Server VM/1.8.0_111/25.111-b14] 
[2016-11-22T12:19:58,618][ERROR][o.e.b.Bootstrap   ] Exception 
org.elasticsearch.ElasticsearchException: Failed to load plugin class [org.elasticsearch.xpack.XPackPlugin] 
    at org.elasticsearch.plugins.PluginsService.loadPlugin(PluginsService.java:462) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.plugins.PluginsService.loadBundles(PluginsService.java:414) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.plugins.PluginsService.<init>(PluginsService.java:144) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.node.Node.<init>(Node.java:281) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.node.Node.<init>(Node.java:220) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.bootstrap.Bootstrap$5.<init>(Bootstrap.java:191) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.bootstrap.Bootstrap.setup(Bootstrap.java:191) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:286) [elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:112) [elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.bootstrap.Elasticsearch.execute(Elasticsearch.java:103) [elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.cli.SettingCommand.execute(SettingCommand.java:54) [elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:96) [elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.cli.Command.main(Command.java:62) [elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:80) [elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:73) [elasticsearch-5.0.1.jar:5.0.1] 
Caused by: java.lang.reflect.InvocationTargetException 
    at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method) ~[?:?] 
    at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:62) ~[?:?] 
    at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45) ~[?:?] 
    at java.lang.reflect.Constructor.newInstance(Constructor.java:423) ~[?:1.8.0_111] 
    at org.elasticsearch.plugins.PluginsService.loadPlugin(PluginsService.java:451) ~[elasticsearch-5.0.1.jar:5.0.1] 
    ... 14 more 
Caused by: org.elasticsearch.ElasticsearchException: failed to initialize a TrustManagerFactory 
    at org.elasticsearch.xpack.ssl.StoreTrustConfig.createTrustManager(StoreTrustConfig.java:57) ~[?:?] 
    at org.elasticsearch.xpack.ssl.SSLService.createSslContext(SSLService.java:387) ~[?:?] 
    at org.elasticsearch.xpack.ssl.SSLService.loadSSLConfigurations(SSLService.java:423) ~[?:?] 
    at org.elasticsearch.xpack.ssl.SSLService.<init>(SSLService.java:78) ~[?:?] 
    at org.elasticsearch.xpack.XPackPlugin.<init>(XPackPlugin.java:181) ~[?:?] 
    at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method) ~[?:?] 
    at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:62) ~[?:?] 
    at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45) ~[?:?] 
    at java.lang.reflect.Constructor.newInstance(Constructor.java:423) ~[?:1.8.0_111] 
    at org.elasticsearch.plugins.PluginsService.loadPlugin(PluginsService.java:451) ~[elasticsearch-5.0.1.jar:5.0.1] 
    ... 14 more 
Caused by: java.security.AccessControlException: access denied ("java.io.FilePermission" "C:\tmp\watcher-truststore.jks" "read") 
    at java.security.AccessControlContext.checkPermission(AccessControlContext.java:472) ~[?:1.8.0_111] 
    at java.security.AccessController.checkPermission(AccessController.java:884) ~[?:1.8.0_111] 
    at java.lang.SecurityManager.checkPermission(SecurityManager.java:549) ~[?:1.8.0_111] 
    at java.lang.SecurityManager.checkRead(SecurityManager.java:888) ~[?:1.8.0_111] 
    at sun.nio.fs.WindowsChannelFactory.open(WindowsChannelFactory.java:293) ~[?:?] 
    at sun.nio.fs.WindowsChannelFactory.newFileChannel(WindowsChannelFactory.java:162) ~[?:?] 
    at sun.nio.fs.WindowsFileSystemProvider.newByteChannel(WindowsFileSystemProvider.java:225) ~[?:?] 
    at java.nio.file.Files.newByteChannel(Files.java:361) ~[?:1.8.0_111] 
    at java.nio.file.Files.newByteChannel(Files.java:407) ~[?:1.8.0_111] 
    at java.nio.file.spi.FileSystemProvider.newInputStream(FileSystemProvider.java:384) ~[?:1.8.0_111] 
    at java.nio.file.Files.newInputStream(Files.java:152) ~[?:1.8.0_111] 
    at org.elasticsearch.xpack.ssl.CertUtils.trustManager(CertUtils.java:162) ~[?:?] 
    at org.elasticsearch.xpack.ssl.StoreTrustConfig.createTrustManager(StoreTrustConfig.java:55) ~[?:?] 
    at org.elasticsearch.xpack.ssl.SSLService.createSslContext(SSLService.java:387) ~[?:?] 
    at org.elasticsearch.xpack.ssl.SSLService.loadSSLConfigurations(SSLService.java:423) ~[?:?] 
    at org.elasticsearch.xpack.ssl.SSLService.<init>(SSLService.java:78) ~[?:?] 
    at org.elasticsearch.xpack.XPackPlugin.<init>(XPackPlugin.java:181) ~[?:?] 
    at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method) ~[?:?] 
    at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:62) ~[?:?] 
    at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45) ~[?:?] 
    at java.lang.reflect.Constructor.newInstance(Constructor.java:423) ~[?:1.8.0_111] 
    at org.elasticsearch.plugins.PluginsService.loadPlugin(PluginsService.java:451) ~[elasticsearch-5.0.1.jar:5.0.1] 
    ... 14 more 
[2016-11-22T12:19:58,626][WARN ][o.e.b.ElasticsearchUncaughtExceptionHandler] [] uncaught exception in thread [main] 
org.elasticsearch.bootstrap.StartupException: ElasticsearchException[Failed to load plugin class [org.elasticsearch.xpack.XPackPlugin]]; nested: InvocationTargetException; nested: ElasticsearchException[failed to initialize a TrustManagerFactory]; nested: AccessControlException[access denied ("java.io.FilePermission" "C:\tmp\watcher-truststore.jks" "read")]; 
    at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:116) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.bootstrap.Elasticsearch.execute(Elasticsearch.java:103) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.cli.SettingCommand.execute(SettingCommand.java:54) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:96) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.cli.Command.main(Command.java:62) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:80) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:73) ~[elasticsearch-5.0.1.jar:5.0.1] 
Caused by: org.elasticsearch.ElasticsearchException: Failed to load plugin class [org.elasticsearch.xpack.XPackPlugin] 
    at org.elasticsearch.plugins.PluginsService.loadPlugin(PluginsService.java:462) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.plugins.PluginsService.loadBundles(PluginsService.java:414) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.plugins.PluginsService.<init>(PluginsService.java:144) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.node.Node.<init>(Node.java:281) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.node.Node.<init>(Node.java:220) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.bootstrap.Bootstrap$5.<init>(Bootstrap.java:191) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.bootstrap.Bootstrap.setup(Bootstrap.java:191) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:286) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:112) ~[elasticsearch-5.0.1.jar:5.0.1] 
    ... 6 more 
Caused by: java.lang.reflect.InvocationTargetException 
    at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method) ~[?:?] 
    at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:62) ~[?:?] 
    at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45) ~[?:?] 
    at java.lang.reflect.Constructor.newInstance(Constructor.java:423) ~[?:1.8.0_111] 
    at org.elasticsearch.plugins.PluginsService.loadPlugin(PluginsService.java:451) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.plugins.PluginsService.loadBundles(PluginsService.java:414) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.plugins.PluginsService.<init>(PluginsService.java:144) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.node.Node.<init>(Node.java:281) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.node.Node.<init>(Node.java:220) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.bootstrap.Bootstrap$5.<init>(Bootstrap.java:191) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.bootstrap.Bootstrap.setup(Bootstrap.java:191) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:286) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:112) ~[elasticsearch-5.0.1.jar:5.0.1] 
    ... 6 more 
Caused by: org.elasticsearch.ElasticsearchException: failed to initialize a TrustManagerFactory 
    at org.elasticsearch.xpack.ssl.StoreTrustConfig.createTrustManager(StoreTrustConfig.java:57) ~[?:?] 
    at org.elasticsearch.xpack.ssl.SSLService.createSslContext(SSLService.java:387) ~[?:?] 
    at org.elasticsearch.xpack.ssl.SSLService.loadSSLConfigurations(SSLService.java:423) ~[?:?] 
    at org.elasticsearch.xpack.ssl.SSLService.<init>(SSLService.java:78) ~[?:?] 
    at org.elasticsearch.xpack.XPackPlugin.<init>(XPackPlugin.java:181) ~[?:?] 
    at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method) ~[?:?] 
    at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:62) ~[?:?] 
    at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45) ~[?:?] 
    at java.lang.reflect.Constructor.newInstance(Constructor.java:423) ~[?:1.8.0_111] 
    at org.elasticsearch.plugins.PluginsService.loadPlugin(PluginsService.java:451) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.plugins.PluginsService.loadBundles(PluginsService.java:414) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.plugins.PluginsService.<init>(PluginsService.java:144) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.node.Node.<init>(Node.java:281) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.node.Node.<init>(Node.java:220) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.bootstrap.Bootstrap$5.<init>(Bootstrap.java:191) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.bootstrap.Bootstrap.setup(Bootstrap.java:191) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:286) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:112) ~[elasticsearch-5.0.1.jar:5.0.1] 
    ... 6 more 
Caused by: java.security.AccessControlException: access denied ("java.io.FilePermission" "C:\tmp\watcher-truststore.jks" "read") 
    at java.security.AccessControlContext.checkPermission(AccessControlContext.java:472) ~[?:1.8.0_111] 
    at java.security.AccessController.checkPermission(AccessController.java:884) ~[?:1.8.0_111] 
    at java.lang.SecurityManager.checkPermission(SecurityManager.java:549) ~[?:1.8.0_111] 
    at java.lang.SecurityManager.checkRead(SecurityManager.java:888) ~[?:1.8.0_111] 
    at sun.nio.fs.WindowsChannelFactory.open(WindowsChannelFactory.java:293) ~[?:?] 
    at sun.nio.fs.WindowsChannelFactory.newFileChannel(WindowsChannelFactory.java:162) ~[?:?] 
    at sun.nio.fs.WindowsFileSystemProvider.newByteChannel(WindowsFileSystemProvider.java:225) ~[?:?] 
    at java.nio.file.Files.newByteChannel(Files.java:361) ~[?:1.8.0_111] 
    at java.nio.file.Files.newByteChannel(Files.java:407) ~[?:1.8.0_111] 
    at java.nio.file.spi.FileSystemProvider.newInputStream(FileSystemProvider.java:384) ~[?:1.8.0_111] 
    at java.nio.file.Files.newInputStream(Files.java:152) ~[?:1.8.0_111] 
    at org.elasticsearch.xpack.ssl.CertUtils.trustManager(CertUtils.java:162) ~[?:?] 
    at org.elasticsearch.xpack.ssl.StoreTrustConfig.createTrustManager(StoreTrustConfig.java:55) ~[?:?] 
    at org.elasticsearch.xpack.ssl.SSLService.createSslContext(SSLService.java:387) ~[?:?] 
    at org.elasticsearch.xpack.ssl.SSLService.loadSSLConfigurations(SSLService.java:423) ~[?:?] 
    at org.elasticsearch.xpack.ssl.SSLService.<init>(SSLService.java:78) ~[?:?] 
    at org.elasticsearch.xpack.XPackPlugin.<init>(XPackPlugin.java:181) ~[?:?] 
    at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method) ~[?:?] 
    at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:62) ~[?:?] 
    at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45) ~[?:?] 
    at java.lang.reflect.Constructor.newInstance(Constructor.java:423) ~[?:1.8.0_111] 
    at org.elasticsearch.plugins.PluginsService.loadPlugin(PluginsService.java:451) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.plugins.PluginsService.loadBundles(PluginsService.java:414) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.plugins.PluginsService.<init>(PluginsService.java:144) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.node.Node.<init>(Node.java:281) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.node.Node.<init>(Node.java:220) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.bootstrap.Bootstrap$5.<init>(Bootstrap.java:191) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.bootstrap.Bootstrap.setup(Bootstrap.java:191) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:286) ~[elasticsearch-5.0.1.jar:5.0.1] 
    at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:112) ~[elasticsearch-5.0.1.jar:5.0.1] 
    ... 6 more 

私は、管理者およびトラストストア・ファイルとしてCMDを実行しているしていますエラスティックがそれを読むために必要な許可。私はなぜこのエラーが起こっているのか分からない、誰でも私を助けてくれる?

これは私のelasticsearch.ymlファイルに追加されたオプションである:私はelasticsearch.ymlからトラストストアの設定を削除した場合、私は弾性との両方を開始することができ

server.ssl.key: C:\tmp\kibana.local.key 
server.ssl.cert: C:\tmp\kibana.local.crt 

xpack.security.encryptionKey: "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" 

xpack.security.http.ssl.truststore.path: C:\tmp\watcher-truststore.jks 
xpack.security.http.ssl.truststore.password: <truststorepw> 

そして、私のkibana.ymlファイルkibanaとkibanaはhttpsで動作しています。

答えて

5

私もElsticsearchフォーラムにthis questionを投稿し、そこに私の問題に答えを得た:

Elasticsearchを読み取ることができる ディレクトリの制限されたセットで、セキュリティマネージャの下で実行されます。キーファイルと証明書は、configディレクトリに格納されている であり、必要に応じてサブディレクトリに配置することができます。

関連する問題