無法通過Python訪問ElasticSearch AWS

Question

我試圖通過Python從我的本地主機訪問ElasticSearch AWS（我可以通過我的瀏覽器訪問它）。

from elasticsearch import Elasticsearch 
ELASTIC_SEARCH_ENDPOINT = 'https://xxx' 
es = Elasticsearch([ELASTIC_SEARCH_ENDPOINT]) 

我收到此錯誤：

ImproperlyConfigured('Root certificates are missing for certificate validation. Either pass them in using the ca_certs parameter or install certifi to use it automatically.',) 

我怎樣才能訪問它？我沒有配置任何證書，我只解放了可以訪問ElasticSearch服務的IP。

Answer 1

elasticsearch-py doesn’t ship with default set of root certificates. To have working SSL certificate validation you need to either specify your own as ca_certs or install certifi which will be picked up automatically.

from elasticsearch import Elasticsearch 

# you can use RFC-1738 to specify the url 
es = Elasticsearch(['https://user:secret@localhost:443']) 

# ... or specify common parameters as kwargs 

# use certifi for CA certificates 
import certifi 

es = Elasticsearch(
    ['localhost', 'otherhost'], 
    http_auth=('user', 'secret'), 
    port=443, 
    use_ssl=True 
) 

# SSL client authentication using client_cert and client_key 

es = Elasticsearch(
    ['localhost', 'otherhost'], 
    http_auth=('user', 'secret'), 
    port=443, 
    use_ssl=True, 
    ca_certs='/path/to/cacert.pem', 
    client_cert='/path/to/client_cert.pem', 
    client_key='/path/to/client_key.pem', 
) 

https://elasticsearch-py.readthedocs.io/en/master/

Answer 2

我就是這麼做的，它的工作：

from elasticsearch import Elasticsearch, RequestsHttpConnection 
from requests_aws4auth import AWS4Auth 

host = 'YOURHOST.us-east-1.es.amazonaws.com' 
awsauth = AWS4Auth(YOUR_ACCESS_KEY, YOUR_SECRET_KEY, REGION, 'es') 

es = Elasticsearch(
    hosts=[{'host': host, 'port': 443}], 
    http_auth=awsauth, 
    use_ssl=True, 
    verify_certs=True, 
    connection_class=RequestsHttpConnection 
) 
print(es.info()) 

Answer 3

for python 3.5 install certifi and use ca_certs=certifi.where() this will pass the certificates

import certifi 
from elasticsearch import Elasticsearch 

host = 'https://###########.ap-south-1.es.amazonaws.com' 

es = Elasticsearch([host], use_ssl=True, ca_certs=certifi.where())