# Graylog 3.3 Certificate issue

**URL:** <https://community.graylog.org/t/graylog-3-3-certificate-issue/18120>\
**Category:** Graylog Central (peer support)\
**Created:** [December 8, 2020, 2:57pm UTC](https://community.graylog.org/t/graylog-3-3-certificate-issue/18120 "2020-12-08T14:57:44Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![g-clement](https://avatars.discourse-cdn.com/v4/letter/g/3d9bf3/32.png) [@g-clement](https://community.graylog.org/u/g-clement)\
**Post date:** [December 8, 2020, 2:57pm UTC](https://community.graylog.org/t/graylog-3-3-certificate-issue/18120/1 "2020-12-08T14:57:44Z")

</div>

Hi there !  
I am currently facing an issue with Graylog 3.3 and certificates.  
We are running on a CentOS 8 server and followed all steps to install it properly.

I am able to connect on web interface using HTTP without any issue.

I want to be more secure by going HTTPS but I have got the followin error when trying to configure certificates :

2020-12-08T15:28:05.877+01:00 WARN [DefaultTLSProtocolProvider] JRE doesn’t support all default TLS protocols. Changing \<[TLSv1.2, TLSv1.3]\> to \<[TLSv1.2]\>  
2020-12-08T15:28:06.019+01:00 INFO [CmdLineTool] Loaded plugin: AWS plugins 3.3.9 [org.graylog.aws.AWSPlugin]  
2020-12-08T15:28:06.019+01:00 INFO [CmdLineTool] Loaded plugin: Integrations 3.3.9 [org.graylog.integrations.IntegrationsPlugin]  
2020-12-08T15:28:06.020+01:00 INFO [CmdLineTool] Loaded plugin: Collector 3.3.9 [org.graylog.plugins.collector.CollectorPlugin]  
2020-12-08T15:28:06.021+01:00 INFO [CmdLineTool] Loaded plugin: Threat Intelligence Plugin 3.3.9 [org.graylog.plugins.threatintel.ThreatIntelPlugin]  
2020-12-08T15:28:06.144+01:00 ERROR [CmdLineTool] Invalid configuration  
com.github.joschi.jadconfig.ValidationException: Unreadable or missing HTTP private key: null  
at org.graylog2.configuration.HttpConfiguration.validateTlsConfig(HttpConfiguration.java:252) ~[graylog.jar:?]  
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) ~[?:1.8.0\_272]  
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) ~[?:1.8.0\_272]  
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) ~[?:1.8.0\_272]  
at java.lang.reflect.Method.invoke(Method.java:498) ~[?:1.8.0\_272]  
at com.github.joschi.jadconfig.ReflectionUtils.invokeMethodsWithAnnotation(ReflectionUtils.java:53) ~[graylog.jar:?]  
at com.github.joschi.jadconfig.JadConfig.invokeValidatorMethods(JadConfig.java:221) ~[graylog.jar:?]  
at com.github.joschi.jadconfig.JadConfig.process(JadConfig.java:100) ~[graylog.jar:?]  
at org.graylog2.bootstrap.CmdLineTool.processConfiguration(CmdLineTool.java:351) [graylog.jar:?]  
at org.graylog2.bootstrap.CmdLineTool.readConfiguration(CmdLineTool.java:344) [graylog.jar:?]  
at org.graylog2.bootstrap.CmdLineTool.run(CmdLineTool.java:178) [graylog.jar:?]  
at org.graylog2.bootstrap.Main.main(Main.java:50) [graylog.jar:?]

The error message is :  
ERROR [CmdLineTool] Invalid configuration  
com.github.joschi.jadconfig.ValidationException: Unreadable or missing HTTP private key: null

Where is the private key path ?

I tried with both a self-signed key and from a signed key using our internal CA (Windows-based)

Any idea ?

Thank you

Best regards

Clement

---

<div class="post-metadata">

**Author:** ![makarands](https://avatars.discourse-cdn.com/v4/letter/m/838e76/32.png) [@makarands](https://community.graylog.org/u/makarands)\
**Post date:** [December 11, 2020, 10:00am UTC](https://community.graylog.org/t/graylog-3-3-certificate-issue/18120/2 "2020-12-11T10:00:08Z")

</div>

@g-clement You can take a look at the below Gralog documentation link, which will help you solve your query.

> **[Using HTTPS — Graylog 4.0.0 documentation](https://docs.graylog.org/en/4.0/pages/configuration/https.html#using-https)**

---

<div class="post-metadata">

**Author:** ![g-clement](https://avatars.discourse-cdn.com/v4/letter/g/3d9bf3/32.png) [@g-clement](https://community.graylog.org/u/g-clement)\
**Post date:** [December 15, 2020, 1:26pm UTC](https://community.graylog.org/t/graylog-3-3-certificate-issue/18120/3 "2020-12-15T13:26:32Z")

</div>

Hello @makarands,

I followed the steps on official documentation, trying with certificates signed by our internal CA but also with self signed certificates.

My issue is :  
Invalid configuration  
com.github.joschi.jadconfig.ValidationException: Unreadable or missing HTTP private key: null

Why do i get a “null” reference ?

Regards

Clement

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [December 29, 2020, 1:26pm UTC](https://community.graylog.org/t/graylog-3-3-certificate-issue/18120/4 "2020-12-29T13:26:45Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.
