Failed to connect to ES server: SSL peer certificate or SSH remote key was not OK

[TLINDEN]

My test server uses a self signed certificate, so I need to be able to disable cert validation. Is that possible?

Currently I'm getting:

cat ~/.config/es-cli/config.json ; echo; es health
{
  "clusters": {
    "cluster1": {
      "host": "https://elastic:9206"
    }
  }
}

[2026-05-18T12:16:13.2507] 102588: [es:error] health error : (60) SSL peer certificate or SSH remote key was not OK
https://elastic:9206 error (60) SSL peer certificate or SSH remote key was not OK

[rr0gi]

diff --git a/src/es.ml b/src/es.ml
index c41c315..4b9d2cf 100644
--- a/src/es.ml
+++ b/src/es.ml
@@ -47,7 +47,11 @@ let make_url host path args =
   String.concat "" [ host; path; ]
 
 let request ?verbose ?body action host path args =
-  Web.http_request_lwt' ?verbose ~timeout:(Time.to_sec !http_timeout) ?body:(json_body_opt body) action (make_url host path args)
+  let setup h =
+    Curl.set_sslverifyhost h SSLVERIFYHOST_NONE;
+    Curl.set_sslverifypeer h false;
+  in
+  Web.http_request_lwt' ?verbose ~setup ~timeout:(Time.to_sec !http_timeout) ?body:(json_body_opt body) action (make_url host path args)
 
 let request ?verbose ?body action host path args unformat =
   match%lwt request ?verbose ?body action host path args with

can use the above patch