elasticsearch6.3.1 开启X-pack、配置自生成证书elastic-certificates.p12并且设置密码后，kibana6.3.1怎么配置？

kibana目前配置如下：
server.port: 5601
server.host: " 192.168.31.170"
server.name: "elk-kibana"
elasticsearch.url: " https://192.168.31.170:9200"
kibana.index: ".kibana"
elasticsearch.username: "elastic"
elasticsearch.password: "Lin25016"
xpack.security.encryptionKey: "1234567890qwertyuioplkjhgfdsazxcvbnm"
xpack.reporting.encryptionKey: "1234567890qwertyuioplkjhgfdsazxcvbnm"
报错如下：
[13:53:31.976] [error][admin][elasticsearch] Request error, retrying
HEAD  https://192.168.31.170:9200/ => self signed certificate in certificate chain
[13:53:32.035] [warning][admin][elasticsearch] Unable to revive connection:  https://192.168.31.170:9200/
[13:53:32.036] [warning][admin][elasticsearch] No living connections
[13:53:32.058] [error][status][plugin:xpack_main@6.3.1] Status changed from yellow to red - Unable to connect to Elasticsearch at  https://192.168.31.170:9200.
[13:53:32.060] [error][status][plugin:searchprofiler@6.3.1] Status changed from yellow to red - Unable to connect to Elasticsearch at  https://192.168.31.170:9200.
求大神解惑