I found this
mainly adding this:
Add “-Djavax.net.ssl.trustStore=/etc/pki/ca-trust/extracted/java/cacerts.jks” in /etc/sysconfig/graylog-server
and restarting graylog worked for me. I didn’t see this anywhere in the official documentation. Maybe it should be in there.
[Edit]
My mistake, it is here