Hello, i’m using Graylog 4.0 with Ubuntu 20.04.2 LTS, elasticsearch 7.10.2 and mongodb 4.4.2. Graylog is working fine with HTTPS and logs coming from other servers. I tried to implement TLS for the inputs coming from RSYSLOG. But unfortunaly it’s not working. I tried to use the same certificates …

Yes i already saw your post on this topic ! Unfortunaly i don’t know if i’m doing badly my self-signed certificate. But it’s working for the web page of graylog in HTTPS so … Or maybe the problem is maybe because i didn’t put : IP.2=“ip_of_rsyslog_server” ??? I only wrote the IP of the graylo…

Hello, Just chimming in. By chance you see anything in the log files that pertain to this issue?

On the RSYSLOG client, i have this error : GnuTLS error -48: Key usage violation in certificate has been detected On another try i had this error too : gnutls decryption has failed To be honest i’m kinda lost with making working TLS between the logs transfer, and it’s the last thing i need t…

Probably your certificate is wrongly generated. Which command did you use to create cert? Check your key usage section: echo | openssl s_client -connect graylog_server:input_port 2>/dev/null | openssl x509 -noout -text | grep -i -A1 usage

I used the commands from the documentation of graylog $ openssl req -x509 -days 365 -nodes -newkey rsa:2048 -config openssl-graylog.cnf -keyout pkcs5-plain.pem -out cert.pem $ openssl pkcs8 -in pkcs5-plain.pem -topk8 -nocrypt -out pkcs8-plain.pem I tried your command. This is the output i hav…

Your key usage missing Digital Signature i think, but maybe i’m wrong.

I don’t know if this is the problem :confused:

[image] Veak: openssl-graylog.cnf How about content of file openssl-graylog.cnf?

[req] distinguished_name = req_distinguished_name x509_extensions = v3_req prompt = no Details about the issuer of the certificate [req_distinguished_name] C = XXXX ST = XXX L = XXXX O = XXXX OU = XXXX CN = graylog-server.home [v3_req] keyUsage = keyEncipherment, dataEncipherment exte…

Graylog TLS not working

Graylog Central (peer support)

aaronsachs (Aaron Sachs) August 17, 2021, 11:42am 2

Have you seen Using Syslog with TLS - #3 by aaronsachs?

Topic		Replies	Views
How to communicate graylog and rsyslog over TLS Graylog Central (peer support)	3	3441	June 14, 2021
RSyslog over TLS Graylog Central (peer support)	6	12007	March 13, 2018
Enable Rsyslog with TLS to Graylog2 Graylog Central (peer support)	5	3384	June 17, 2019
How to configure an syslog TLS input in Graylog2 Graylog Central (peer support)	1	3622	December 14, 2017
Unable to start inputs after implementing HTTPS on Graylog web interface Graylog Central (peer support)	6	2648	January 25, 2022

Graylog TLS not working

Related topics