How to use a commerical cert

Graylog Central (peer support)
1

Before you post: Your responses to these questions will help the community help you. Please complete this template if you’re asking a support question.
Don’t forget to select tags to help index your topic!

1. Describe your incident:

I have bought a commercial certificate from Sectigo. I would like to use the commercial cert that we purchased. They have provided us the following files:

  • Your PositiveSSL Certificate - graylog_ucs_louisiana_edu.crt
  • Your Apache “bundle” file - graylog_ucs_louisiana_edu.ca-bundle

These are my following questions:

  1. What are the steps to import this commercial cert and use https?

  2. Where in the documentation can I find the steps pertaining to using a commercial cert and enabling https?

2. Describe your environment:

  • OS Information: RHEL 9.6

  • Package Version: Graylog Open 6.2

  • Service logs, configurations, and environment variables:

3. What steps have you already taken to try and solve the problem?

I am confused which documents to follow as I don’t have a pfx certificate according to this instructions:

How-To Guide: Securing Graylog with TLS

4. How can the community help?

I would really appreciate if the community can provide some step by step instructions on how to enable https and import the commercial cert.

Thank you in advance! :folded_hands:

Helpful Posting Tips: Tips for Posting Questions that Get Answers [Hold down CTRL and link on link to open tips documents in a separate tab]

2

UPDATED

I have followed every steps from the documentation below :
Secure Graylog Interface with TLS

Following every steps in the documentation I’ve generated the following files, screenshot below:

image

If the picture is not clear enough, these are files that have been generated following the steps:

graylog.csr ; graylog_ucs_louisiana_edu.crt ; keypair.key ; public.cert.pem public.chain.text.pem ; public.text.pem ; graylog_ucs_louisiana_edu.ca-bundle graylog_ucs_louisiana_edu.pfx ; private.key ; public.chain.pem ; public.pem

However, I am stuck at this step (Import the Certificate Files into the Java Key Store) below, screenshot provided:

image
image1066×568 46.3 KB

My question right now is how can I get the enterpriseRootCA.cer as mentioned in the steps?
I do not have any files with .cer

Also, in this step Import the Root CA and Intermediate certificates:

sudo keytool -importcert -keystore /etc/graylog/graylog.jks -storepass changeit -alias cachain -file /etc/graylog/enterpriseRootCA.pem

What is changeit?

3

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.