Graylog Server not starting after configuring HTTPS

Before you post: Your responses to these questions will help the community help you. Please complete this template if you’re asking a support question.
Don’t forget to select tags to help index your topic!

1. Describe your incident:
We installed Graylog 6.1 (following the Graylog RedHat install documentation), then completed the Preflight UI steps, including the Graylog CA cert generation. We then made the necessary edits to the server.conf file to enable HTTPS.

But now graylor-server.service will not start. The server.log file shows this error –
“com.github.joschi.jadconfig.ValidationException: Unreadable or missing HTTP private key: null”

2. Describe your environment:

  • OS Information: Oracle Linux Server 9.5

  • Package Version:
    graylog-server.x86_64 v 6.1.7-1
    graylog-datanode.x86_64 v 6.1.6-1

  • Service logs, configurations, and environment variables:

3. What steps have you already taken to try and solve the problem?
We generated the cert during the Graylog preflight UI steps, but cannot tell where it placed the cert files. Since we don’t know where the cert files are located we’re unable to validate if the config file has the correct cert paths, nor can we confirm the file permissions.

4. How can the community help?
We’d appreciate detailed next steps to follow after generating the Graylog CA cert. As described above, we made what we think are the necessary edits to the server.conf file to enable HTTPS, but we obviously didn’t do it correctly because graylog-server.service is not starting anymore!

Helpful Posting Tips: Tips for Posting Questions that Get Answers [Hold down CTRL and link on link to open tips documents in a separate tab]

The cert that was created during preflight is just for the connection to datanode, you have to manually create certs and take the steps to point graylog to those certs to enable https on thr web interface.

1 Like

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.