Graylog and https and cert

[gsmith]

@tatuh
Hello,

Maybe I can help you on this issue.

@tatuh

Is it correct to use that same cert and key for graylog, when enabling tls (for https traffic) ?

Yes its posible to use the same certs, and I have for my lab Graylog 4.0.6 Server.
I’m using Apache, but I believe you can also use you certs with Nginx.

@tatuh

I only need to make sure that they are in correct format?

Yes, also depeneds on where and how you created your certs.

@tatuh

I keep getting “Caused by: java.security.KeyException: No private key found in file: /etc/graylog/server/server.key”

Can Graylog access those Certs?
What method did you use to create you Certs for Graylog?

This may help.
Caused by: java.security.KeyException: No private key found in file:

@tatuh

And If I add the files as serverFiles, I guess the permissions are correct out of the box?
(graylog 1.7.9 · KongZ/kong-z)

I havent used that before so I’m unsure.