Java Keystore and Docker

[mtominsk (Mark)]

Hi all,
I’m stuck! I have the following situation…
I try to setup a dockerized graylog server in the internal network which should support https / TLS. I’m using certs which are signed by our own internal CA. Actually everything is up and running so far, except the last step. How can I add the used certificate file to the dockerized JAVA Keystore or work arround it? The server is up and running so far, but log is running full of:
WARN : org.graylog2.shared.rest.resources.ProxiedResource - Unable to call https://172.18.0.4:9000/api/system/metrics/multiple on node
I’ve seen this error before on another “non Docker” setup, so I’m pretty sure that this is the problem.
thanks in advance
Mark

[gsmith]

Hello And welcome,

Unfortunately I’m not to familiar with Docker containers.
I did come across these Post’s. They might have some insight where you can find dockerized JAVA Keystore

Docker TLS Activation

You might want to use the correct setting name: GRAYLOG_REST_TLS_KEY_PASSWORD (rest_tls_key_password).

Configuring HTTPS with a docker container

Here is my docker-compose file: graylog: image: graylog2/server:latest container_name: graylog hostname: graylog environment: GRAYLOG_IS_MASTER: "true" GRAYLOG_PASSWORD_SECRET: somepasswordpepper:) GRAYLOG_ROOT_PASSWORD_SHA2: whocares? GRAYLOG_SERVER_JAVA_OPTS: -Xms2g -Xmx4g -XX:NewRatio=1 -XX:MaxMetaspaceSize=256m -server -XX:+ResizeTLAB -XX:+UseConcMarkSweepGC -XX:+CMSConcurrentMTEnabled -XX:+CMSClassUnloadingEnabled -XX:+UseParNewGC -XX:-OmitStac…

Graylog 3.0.2 docker with https settings problem

please format your posting that would make it more readable. did you have the checked that you do not overwrite any content with your volumen mount? is graylogfqdn resolving to the container adress that Graylog binds to? (default is 127.0.0.1) … does your certificate include ip and hostname?

Issue with Docker and SSL

I am attempting to run the docker 2.4 container using docker-compose and details from here: http://docs.graylog.org/en/2.4/pages/installation/docker.html I am also working to get SSL going, and I mostly have it working. I can get to the website and logged in fine, and it even appears it may be working (I haven’t tried yet to get logs shipping into Graylog yet to see). I used these details to setup SSL and even used this with full success on a previous install that wasn’t using docker: http://…

Hope that helps