Skip to content
By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post
About re:Post

OpenSearch Fails validation on mystery SSL certificate

0

I cannot upgrade my OpenSearch because we have a Validation Failure. This is the information:

InvalidCertificate: The SSL certificate for the domain must be in the ISSUED state. Ensure that all certificates are ISSUED and try again.

The problem is, I have no idea what SSL certification they are talking about, how to see it or how to update it. This can't be the SSL on our domain (because what would that have to do with OpenSearch?), so it must be some other SSL certificate.

How to diagnose this further?

(Also, it tells me to Cancel Request to update the service software but hitting cancel never does anything - the warning is always there on the console)

Topics
Analytics
Tags
Amazon OpenSearch Service
Language
English

asked 2 years ago422 views

1 Answer
0

Here is a link to the documentation that covers troubleshooting validation errors during an upgrade for Amazon Opensearch service

https://docs.aws.amazon.com/opensearch-service/latest/developerguide/managedomains-configuration-changes.html#validation

The text is for a customer certificate not issued and there are link s to help you discover which certificate is being used

If your domain uses a custom endpoint, you secure it by either generating an SSL certificate in AWS Certificate Manager (ACM) or importing one of your own. The certificate status must be Issued. If you receive this error, check the status of your certificate in the ACM console. If the status is Expired, Failed, Inactive, or Pending validation, see the ACM troubleshooting documentation to resolve the issue.

check the status of the certificate https://docs.aws.amazon.com/acm/latest/userguide/gs-acm-describe.html

Troubleshoot issues with AWS Certificate Manager. https://docs.aws.amazon.com/acm/latest/userguide/troubleshooting.html

It is also worth checking the endpoint configuration to see which certificate is being used

https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_DescribeDomains.html

AWS

answered 2 years ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Relevant content