how many times can you spot the letter o in:
i was doing offline upgrade from 7.16 to 8.0. with all servers stopped upgrade with rpm and started again.
from 7.16 to 7.17 no problems at all. cluster came up green.
did i loose anything in elasticsearch breaking changes | elastic installation and upgrade guide [8.0] | elastic ?
did you have security feature enabled in your older version?
string es 8, security is enabled by default which can be disabled if not required.
security was enabled on 7.16-7.17 also.
hey, sorry this got missed from the breaking changes. we had a few improvements to the validation of ssl configuration, and this particular one got missed from the docs.
in your case, it looks like the old configuration worked by accident, because youre actually using the ca file as your keystore & truststore which is not what the docs advise, and it typically indicates an error in configuration.
in your case it looks like it worked (well enough) in 7.x, but in most case that sort of configuration would lead to additional, hard to diagnose errors. the change in 8.0 is designed to catch those errors earlier.
theres a couple of ways to solve this.
if your keystore has a password on it, then you will need to enter it in place of the quotes in -storepass .
that will give you the same behaviour you had in es7, although as i mentioned above, i think youve made a mistake in your configuration.
i would recommend that you fix up the problem with your nodes, rather than try and work around it.
it look like youre using a ca as the server certificate, which isnt ideal, and its what the documentation guides you to do.
typically you would use elasticsearch-certutil to create a ca (as you have done) and then use that ca to generate one or more server certificates for use in your nodes. if you follow those steps then the file you end up with is usable as a keystore and a truststore, while the ca file is not.
elastic-stack-ca.p12 file in place of the elastic-certificates.p12 file.
i would recommend going back through those instructions and working out where you went wrong, so you can switch over to using elastic-certificates.p12 instead.
thank you tim. ive followed your advice (2nd).
user
The given text has one hundred and forty-five "o"s.
assistant