# Help installing HTTPS for OVA install

**URL:** <https://community.graylog.org/t/help-installing-https-for-ova-install/10974>\
**Category:** Graylog Central (peer support)\
**Created:** [June 28, 2019, 4:02am UTC](https://community.graylog.org/t/help-installing-https-for-ova-install/10974 "2019-06-28T04:02:55Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![TheWanKing](https://avatars.discourse-cdn.com/v4/letter/t/d6d6ee/32.png) [@TheWanKing](https://community.graylog.org/u/TheWanKing)\
**Post date:** [June 28, 2019, 4:02am UTC](https://community.graylog.org/t/help-installing-https-for-ova-install/10974/1 "2019-06-28T04:02:55Z")

</div>

Hi,

I’ve installed GRAYLOG using the latest .ova file. Can’t seem to be able to get https to work. have certificates, which i know work as we’ve used them on other Linux Servers

In the log file i see

RROR [CmdLineTool] Invalid configuration  
com.github.joschi.jadconfig.ValidationException: Unreadable or missing HTTP private key:

My server.conf looks like the following

# 

# Default: false

http\_enable\_tls = true

# The X.509 certificate chain file in PEM format to use for securing the HTTP interface.

http\_tls\_cert\_file = /etc/graylog/star\_cert.pem

# The PKCS#8 private key file in PEM format to use for securing the HTTP interface.

http\_tls\_key\_file = /etc/graylog/star\_private.pem

# The password to unlock the private key used for securing the HTTP interface.

http\_tls\_key\_password = changeit

permissions to the .pem file(s)s are as follows

-rwxrwxrwx 1 root root 2145 Jun 28 03:33 star\_private.pem  
-rwxrwxrwx 1 root root 2776 Jun 28 03:33 star\_cert.pem

Does anyone have any advise?

Regards

TheWanKing

---

<div class="post-metadata">

**Author:** ![jan](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jan/32/11_2.png) [@jan](https://community.graylog.org/u/jan)\
**Post date:** [June 28, 2019, 6:56am UTC](https://community.graylog.org/t/help-installing-https-for-ova-install/10974/2 "2019-06-28T06:56:57Z")

</div>

in what format is your key? Did you notice that you need a PKCS8 in Graylog?

---

<div class="post-metadata">

**Author:** ![TheWanKing](https://avatars.discourse-cdn.com/v4/letter/t/d6d6ee/32.png) [@TheWanKing](https://community.graylog.org/u/TheWanKing)\
**Post date:** [July 1, 2019, 6:01am UTC](https://community.graylog.org/t/help-installing-https-for-ova-install/10974/3 "2019-07-01T06:01:43Z")

</div>

Hi Jan,

Thanks for your quick response. to confirm yes, its in PKCS8 format.

Bag Attributes  
Microsoft Local Key set:   
localKeyID: 01 00 00 00  
friendlyName: le-e62d7ae9-e8cb-40f4-85c2-0814bd67461d  
Microsoft CSP Name: Microsoft RSA SChannel Cryptographic Provider  
Key Attributes  
X509v3 Key Usage: 10  
**-----BEGIN ENCRYPTED PRIVATE KEY-----**  
MIIFHDBOBgkqhkiG9w0BBQ0wQTApBgkqhkiG9w0BBQwwHAQIfCnWLLHUySoCAggA  
…  
0HMJDLb9FlN3cgcz+mQUpw==  
-----END ENCRYPTED PRIVATE KEY-----

---

<div class="post-metadata">

**Author:** ![TheWanKing](https://avatars.discourse-cdn.com/v4/letter/t/d6d6ee/32.png) [@TheWanKing](https://community.graylog.org/u/TheWanKing)\
**Post date:** [July 4, 2019, 5:49am UTC](https://community.graylog.org/t/help-installing-https-for-ova-install/10974/4 "2019-07-04T05:49:52Z")

</div>

Ended up building a new GRAYLOG server from scratch, this time WITHOUT the appliance (.ova). Still couldn’t get https working using the graylog conf file, however, managed to get it working using apache reverse proxy.

---

<div class="post-metadata">

**Author:** ![frantz](https://avatars.discourse-cdn.com/v4/letter/f/dbc845/32.png) [@frantz](https://community.graylog.org/u/frantz)\
**Post date:** [July 4, 2019, 9:24am UTC](https://community.graylog.org/t/help-installing-https-for-ova-install/10974/5 "2019-07-04T09:24:12Z")

</div>

Check /var/log/graylog-server/server.log

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [July 18, 2019, 9:37am UTC](https://community.graylog.org/t/help-installing-https-for-ova-install/10974/6 "2019-07-18T09:37:53Z")

</div>

Closed on July 18, 2019, 9:37am UTC

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.