Graylog to nucool integration issue (Error: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target)

[patrickmann]

Self-signed certs are a pain. One of the things to check is that the entire chain is trusted, not just the root certificate:

Graylog SSL Certificates

I’ve grabbed my own documentation and here’s what we do to make things work: We generate the keypair and certificate on our CA. Input to this is a certificate request file that includes all wanted aliases and which has the flag to mark the key as exportable. The template in question “ClientServerExportablePrivate” ensures that the keypair can be used for both ServerAuth and ClientAuth and that the private key is exportable. [Version] signature="$Windows NT$" [NewRequest] Subject="CN=server314.…