Ssl Logstash TLS证书JKS到PKCS8无效密钥错误

我正在尝试为LogstashV5.1将JKS证书转换为PKCS8。 我在这里找到了一个例子：

但在尝试运行logstash时会产生以下错误：

ERROR logstash.inputs.beats - Looks like you either have an invalid key or your private key was not in PKCS8 format.
{:exception=>java.lang.IllegalArgumentException: File does not contain valid private key: /ELK/logstash/SSL/p8key.pem}

我还尝试使用

-nocrypt

标志转换为pkcs8，并收到以下错误：

ERROR org.logstash.beats.BeatsHandler - Exception: not an SSL/TLS record

ERROR logstash.inputs.beats - Looks like you either have an invalid key or your private key was not in PKCS8 format.
{:exception=>java.lang.IllegalArgumentException: File does not contain valid private key: /ELK/logstash/SSL/p8key.pem}

ERROR org.logstash.beats.BeatsHandler - Exception: not an SSL/TLS record

---

此错误的原因：

ERROR org.logstash.beats.BeatsHandler - Exception: not an SSL/TLS record

ERROR logstash.inputs.beats - Looks like you either have an invalid key or your private key was not in PKCS8 format.
{:exception=>java.lang.IllegalArgumentException: File does not contain valid private key: /ELK/logstash/SSL/p8key.pem}

ERROR org.logstash.beats.BeatsHandler - Exception: not an SSL/TLS record

是因为日志存储输入中未设置

ssl\u key\u passphrase=>“password”

这个错误是：

ERROR org.logstash.beats.BeatsHandler - Exception: not an SSL/TLS record

ERROR logstash.inputs.beats - Looks like you either have an invalid key or your private key was not in PKCS8 format.
{:exception=>java.lang.IllegalArgumentException: File does not contain valid private key: /ELK/logstash/SSL/p8key.pem}

ERROR org.logstash.beats.BeatsHandler - Exception: not an SSL/TLS record

是因为非SSL/TLS通信试图通过SSL/TLS端口。在这起案件中，罪犯被殴打

---

@Akodoleyasu您是否能够纠正此错误：

[INFO][org.logstash.beats.BeatsHandler]异常：不是SSL/TLS记录

[INFO][org.logstash.beats.BeatsHandler]异常：由对等方重置连接

下面是我的metribeat.yml文件。谢谢你的帮助Logstash输出-------------------output.Logstash:#Logstash主机：[“elkstack.mydomain.com:5044”]ssl.enabled:true#可选ssl。默认情况下为关闭HTTPS服务器验证ssl.certificate的根证书列表\u颁发机构：[“/etc/pki/ca/ca.crt”]#ssl客户端身份验证ssl.certificate:“/etc/pki/elkstack.mydomain.com/elkstack.mydomain.com.crt”#客户端证书密钥ssl.Key:/etc/pki/elkstack.mydomain.com/elkstack.mydomain.com.Key”提前谢谢你的帮助！我使用带有密码短语集的

certgen

创建了一个证书。但这为CA证书创建了一个密码短语。无论如何，这不起作用。你能帮我解决这个错误吗？