# HTTPS GrayLog Issue version 3.3.1

**URL:** <https://community.graylog.org/t/https-graylog-issue-version-3-3-1/16205>\
**Category:** Graylog Central (peer support)\
**Created:** [July 5, 2020, 6:53am UTC](https://community.graylog.org/t/https-graylog-issue-version-3-3-1/16205 "2020-07-05T06:53:49Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![onkargl007](https://avatars.discourse-cdn.com/v4/letter/o/c67d28/32.png) [@onkargl007](https://community.graylog.org/u/onkargl007)\
**Post date:** [July 5, 2020, 6:53am UTC](https://community.graylog.org/t/https-graylog-issue-version-3-3-1/16205/1 "2020-07-05T06:53:49Z")

</div>

Greetings Team,

i am trying to setup graylog 3.3.1 using https but having difficulties/NO-Luck,

below is my configuration, need your support to resolve this…

File: openssl-graylog.cnf  
[req]  
distinguished\_name = req\_distinguished\_name  
x509\_extensions = v3\_req  
prompt = no

# Details about the issuer of the certificate

[req\_distinguished\_name]  
C = AE  
ST = Abu-Dhabi  
L = Abu-Dhabi  
O = xxxxx  
OU = Network-Security  
CN = [netopps.xxxxx.net](http://netopps.xxxxx.net)

[v3\_req]  
keyUsage = keyEncipherment, dataEncipherment  
extendedKeyUsage = serverAuth  
subjectAltName = @alt\_names

# IP addresses and DNS names the certificate should include

# Use IP.### for IP addresses and DNS.### for DNS names,

# with “###” being a consecutive number.

[alt\_names]  
IP.1 = 100.xxx.xxx.xxx  
DNS.1 = [netopps.xxxx.net](http://netopps.xxxx.net)

below certificate file and key has been created…

1. pkcs5-plain.pem
2. cert.pem
3. pkcs8-plain.pem
4. pkcs8-encrypted.pem

---

<div class="post-metadata">

**Author:** ![onkargl007](https://avatars.discourse-cdn.com/v4/letter/o/c67d28/32.png) [@onkargl007](https://community.graylog.org/u/onkargl007)\
**Post date:** [July 5, 2020, 6:54am UTC](https://community.graylog.org/t/https-graylog-issue-version-3-3-1/16205/2 "2020-07-05T06:54:11Z")

</div>

below is the configuration of HTTPS

################

# HTTPS settings

################

#### Enable HTTPS support for the HTTP interface

# 

# This secures the communication with the HTTP interface with TLS to prevent request forgery and eavesdropping.

# 

# Default: false

http\_enable\_tls = true

# The X.509 certificate chain file in PEM format to use for securing the HTTP interface.

http\_tls\_cert\_file = /certs/cert.pem

# The PKCS#8 private key file in PEM format to use for securing the HTTP interface.

http\_tls\_key\_file = /certs/pkcs8-plain.pem

# The password to unlock the private key used for securing the HTTP interface.

http\_tls\_key\_password = xxxxxxxx  
http\_publish\_uri = [https://1xx.xxx.xxx.xxx:9000/](https://1xx.xxx.xxx.xxx:9000/)

/etc/default/graylog-server file :-

# Path to the java executable.

JAVA=/usr/bin/java

# Default Java options for heap and garbage collection.

GRAYLOG\_SERVER\_JAVA\_OPTS="-Xms1g -Xmx1g -XX:NewRatio=1 -server -XX:+ResizeTLAB -XX:+UseConcMarkSweepGC -XX:+CMSConcurrentMTEnabled -XX:+CMSClassUnloadingEnabled -XX:-OmitStackTraceInFastThrow -Djavax.net.ssl.trustStore=/certs/cacerts.jks -Djavax.net.ssl.trustStorePassword=XXXXX"

# Pass some extra args to graylog-server. (i.e. “-d” to enable debug mode)

GRAYLOG\_SERVER\_ARGS=""

# Program that will be used to wrap the graylog-server command. Useful to

# support programs like authbind.

GRAYLOG\_COMMAND\_WRAPPER=""

getting an error secure connection failed…

---

<div class="post-metadata">

**Author:** ![jan](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jan/32/11_2.png) [@jan](https://community.graylog.org/u/jan)\
**Post date:** [July 14, 2020, 1:29pm UTC](https://community.graylog.org/t/https-graylog-issue-version-3-3-1/16205/3 "2020-07-14T13:29:28Z")

</div>

and what error did you get when starting Graylog in your Graylog server.conf?

btw. your post would be more readable if you make your code block correct.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [July 28, 2020, 1:41pm UTC](https://community.graylog.org/t/https-graylog-issue-version-3-3-1/16205/4 "2020-07-28T13:41:23Z")

</div>

Closed on July 28, 2020, 1:41pm UTC

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.