Opensearch Dashboard failed to start: Certificate Signature failed

Versions (relevant - OpenSearch/Dashboard/Server OS/Browser):

OpenSearch 2.12
Logstash 8.9.0
Ubuntu 20.04
Firefox

Describe the issue:
I have config the Opensearch and Opensearch Dashboard as the Documents say, but only my Opensearch server (https://localhost:9200) is running, while the Opensearch Dashboards always fail to start. These are the logs of Opensearch Dashboard:

it seems like my certificate is not correct. There is no clear guide of how to generate certificate for Opensearch Dashboard, so i just do the same as the Opensearch guide. Is that likely the problem?

Configuration:

My opensearch.yml:




My opensearch_dashboards.yml:





Thanks
Gray

Hi Gray,

Could you share a full error message?

In your opensearch.yml you have SSL enabled but in your opensearch_dashboards.yml you are still pointing to http: opensearch.host ["http://localhost:9200"] shouldn’t it be opensearch.host ["https://localhost:9200"]

One more thing - according to docs the " Path to the X.509 node certificate chain (PEM format), which must be under the config directory, specified using a relative path." see here:

Best,
mj

1 Like

Thanks mj for responding to my issue.

Well to your first question, in my opensearch_dashboards.yml i think i already set my opensearch.hosts to https://localhost:9200 already in the forth line in this image:

And i dont really understand your second note. Since i dont see any config directory in my /etc/opensearch-dashboards/, i decided to create one /etc/opensearch-dashboards/config and store all the certs and keys in that directory. Is there anything wrong with it?

If i misunderstand anything mind you fix me

Thanks
Gray

Hi @gray653,

Could you set opensearch.ssl.verificationMode to none and test it again?

Thanks,
Mantas

Could you run ls -l etc/opensearch-dashboards/config and share the output as well?

Thanks,
mj

Thanks for replying to my questions.

But i decided not to use the certs anymore and disable the server.ssl so now my dashboard is running with http at the same port.

Rn im having another problem with Logstash input with Auditbeat and Filebeat:

If you have any idea can you help me with that.

Thanks.

Hi @gray653,

Would you mind opening a new forum for your new issue? I think it will be easier for the community to “chip in” and/or follow if users are dealing with similar issues.

Thanks,
mj

1 Like