Client certificate authentication for the Graylog UI?

[masonb81 (Mason)]

Hi,

I would like to use client certificate authentication in front of the Graylog UI. I have been able to solve it by using an Nginx reverse proxy in front of it but would be great if there is a solution to have this natively within graylog?

Cheers,
Mason

[gsmith]

Hello,

@masonb81

would be great if there is a solution to have this natively within graylog?

This worked for my environment.

Graylog3 with https (easy tutorial)

My ambient test: -Oracle Linux 7.6 (VMware 15); -Network: NAT; -Graylog3, MongoDB and Elastic: running together; Documentation base for RPM distro. First of all, read Docs » Configuring Graylog » Using HTTPS 0- mkdir /etc/ssl/certs/graylog/ && cd /etc/ssl/certs/graylog/ 1- openssl req -x509 -days 1095 -nodes -newkey rsa:2048 -config openssl-graylog.cnf -keyout pkcs5-plain.pem -out cert.pem 2- openssl pkcs8 -in pkcs5-plain.pem -topk8 -nocrypt -out pkcs8-plain.pem 3- openssl pkcs8 -in pk…

If im incorrect are you talking about something like a Keycloak?
Hope that helps