Graylog ssl certificate problem, works only in firefox

Graylog Central (peer support)
1

Before you post: Your responses to these questions will help the community help you. Please complete this template if you’re asking a support question.
Don’t forget to select tags to help index your topic!

1. Describe your incident:
https graylog not working in ms edge chromium, it works only in firefox and internet explorer but very slow in the last one.

2. Describe your environment:

  • OS Information:
    windows 10 and 11 and latest graylog on ubuntu

  • Package Version:

  • Service logs, configurations, and environment variables:

3. What steps have you already taken to try and solve the problem?

tried searching the forum here and saw many problems but no working solutions.

4. How can the community help?
In edge it does not load the page and gives me the following error
ERR_SSL_KEY_USAGE_INCOMPATIBLE and when i try to sea the details of the certificate
it gives me the following error
This site does not have a certificate.

Helpful Posting Tips: Tips for Posting Questions that Get Answers [Hold down CTRL and link on link to open tips documents in a separate tab]

2

Hello

I believe your using self-signed certificates, Correct?
If so, when you generate them, you need to adjust you file like this.

keyUsage = keyEncipherment, dataEncipherment
to
keyUsage = nonRepudiation, digitalSignature, keyEncipherment in the section v3_req in file req.conf

EXAMPLE:

[req]
distinguished_name = req_distinguished_name
x509_extensions = v3_req
prompt = no
[req_distinguished_name]
# C = US
# ST = California
# L = Los Angeles
# O = Internet Corporation for Assigned Names and Numbers
# OU = IT Operations
CN = home.arpa
[v3_req]
keyUsage = nonRepudiation, digitalSignature, keyEncipherment
extendedKeyUsage = serverAuth
subjectAltName = @alt_names
[alt_names]
DNS.1 = domain.com
IP.1 = 192.168.1.1

Hope that helps

3

thanks,

it is working fine now

1 Like
4

Hello,

Glad you fixed your issue. What did you do to resolve this?

5

Hi,

I did what you suggested and replaced the keyusage as mentioned in the request file to gererate the certificate.
Thanks again

6

I’m glad it worked, :+1: If you could mark this post as resolved that would be great for future searches.

7

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.