Hi All,
As per the documentation the graylog will only work only if the certificate/key files are in the right format, which is X.509 for certificates and PKCS#8 for the private keys. Both must to be stored in PEM format.
Since my valid certificate & key files are in the name of,
graylog.crt
graylog.key
and I tried to change the format to PEM by using the below commands,
openssl x509 -in graylog.crt -outform PEM -out graylog-certificate.pem
openssl pkcs8 -topk8 -inform PEM -outform PEM -in graylog.key -out graylogkey.pem -nocrypt
But however I am getting the below exception in logs files,
2017-12-01T18:27:31.490Z INFO [LegacyDefaultStreamMigration] Legacy default stream has no connections, no migration needed.
2017-12-01T18:27:31.747Z ERROR [ServiceManager] Service JerseyService [FAILED] has failed in the STARTING state.
java.io.IOException: overrun, bytes = 1194
at javax.crypto.EncryptedPrivateKeyInfo.<init>(EncryptedPrivateKeyInfo.java:92) ~[?:1.8.0_122]
at org.graylog2.shared.security.tls.PemKeyStore.generateKeySpec(PemKeyStore.java:69) ~[graylog.jar:?]
at org.graylog2.shared.security.tls.PemKeyStore.buildKeyStore(PemKeyStore.java:98) ~[graylog.jar:?]
at org.graylog2.shared.initializers.JerseyService.buildSslEngineConfigurator(JerseyService.java:387) ~[graylog.jar:?]
at org.graylog2.shared.initializers.JerseyService.startUpApi(JerseyService.java:208) ~[graylog.jar:?]
at org.graylog2.shared.initializers.JerseyService.startUp(JerseyService.java:141) ~[graylog.jar:?]
at com.google.common.util.concurrent.AbstractIdleService$DelegateService$1.run(AbstractIdleService.java:62) [graylog.jar:?]
at com.google.common.util.concurrent.Callables$4.run(Callables.java:122) [graylog.jar:?]
at java.lang.Thread.run(Thread.java:748) [?:1.8.0_151]
2017-12-01T18:27:31.754Z INFO [InputSetupService] Triggering launching persisted inputs, node transitioned from Uninitialized [LB:DEAD] to Failed [LB:DEAD]
2017-12-01T18:27:31.755Z ERROR [InputSetupService] Not starting any inputs because lifecycle is: Failed [LB:DEAD]
Please kindly correct me if I am doing anything wrong in the setup.
Thanks,
Ganeshbabu R