Configuration ssl/tls graylog https

[gsmith]

Hello,

@jgutie45

I was making all configuration and no error but graylog-server doesn´t start up

If graylog is not starting up then what does the logs show, this should give you an idea whats going on.Then we can focus on that.

@jgutie45

http_enable_tls = true
http_tls_cert_file = /etc/graylog/graylog-certificate.pem
http_tls_key_file = /etc/graylog/graylog-key.pem
http_tls_key_password = secret

This looks good, are you using you own keystore or JAVA default one called cacerts?
And do you have these setting configure?

http_bind_address = graylog.domain.com:9000
http_publish_uri = https://graylog.domain.com:9000/

@jgutie45

[alt_names]
IP.1 = 192.168.194.130
DNS.1 = graylog.localhost

If you have a dns server are these IP.1 = 192.168.194.130, DNS.1 = graylog.localhost reachable of the network?
If not you can add then to your hosts file on the Graylog server.

@jgutie45

I am very disappointed with the graylog software.

To be honest its not the software, it the configurations made. Need to know how all three parts work together first. The HTTPS configuration are pretty hard to get , but once you understand its a lot easier. When I first started it was a mess for weeks.

These posts help me to understand how TCP/TLS works with Graylog and how to create self-signed certificates. perhap looking over them they may help.

Graylog3 with https (easy tutorial)

My ambient test: -Oracle Linux 7.6 (VMware 15); -Network: NAT; -Graylog3, MongoDB and Elastic: running together; Documentation base for RPM distro. First of all, read Docs » Configuring Graylog » Using HTTPS 0- mkdir /etc/ssl/certs/graylog/ && cd /etc/ssl/certs/graylog/ 1- openssl req -x509 -days 1095 -nodes -newkey rsa:2048 -config openssl-graylog.cnf -keyout pkcs5-plain.pem -out cert.pem 2- openssl pkcs8 -in pkcs5-plain.pem -topk8 -nocrypt -out pkcs8-plain.pem 3- openssl pkcs8 -in pk…

Graylog 4.3 TLS/HTTPS Certificate Configuration

**1. Describe your incident:** Unable to get certificates to work for web page HTTPS mode. **2. Describe your environment:** RHEL8 Linux. FIPS disabled. * Package Version: graylog-server-4.3.8.1 OpenSSL 1.1.1k FIPS 25 Mar 2021 **3. What steps have you already taken to try and solve the problem?** I have followed these instructions: https://docs.graylog.org/docs/https **4. How can the community help?** Verify my procedures, what am I missing???? ======================================…