1. Describe your incident: We are unable to make Inputs work when securing the Web Interface. The Certificate is a wildcard certificate for our domain created with Let’s Encrypt (using example.com in this case). The Web Interface works fine but the Inputs are not able to start and we can see the …

So, I was able to make it work by having a look at the docker-entrypoint.sh script. The script checks for certificates inside a root “certificates” directory in .crt format. I converted our .pem formatted certificate to .crt with OpenSSL like so: openssl x509 -outform der -in your-cert.pem -out yo…

Hi, thanks for the reply, however we are still not able to figure this out. Currently I have added the following line to according to the thread you linked: GRAYLOG_SERVER_JAVA_OPTS: "Djavax.net.ssl.trustStore=/etc/graylog/certs -Djavax.net.ssl.trustStorePassword=changeit" Is there a way with do…

The best route would be to copy cacerts from a java distribution, add your CA to this and then mount it via a volume within your compose file. The Djavax.net.ssl.trustStore option could technically point anywhere. It can be copied from a Graylog container to a local destination docker cp graylog:/…

"None of the TrustManagers trust this certificate chain" when using own wildcard certificate

Graylog Central (peer support)

Wine_Merchant November 13, 2025, 3:46pm 2

Hello @JMEunilab,

The CA needs to be added to the java trust store, see here for help with the config.

Topic		Replies	Views
Graylog docker HTTPS config Graylog Central (peer support)	2	917	June 6, 2024
Graylog 4.2.7 + docker compose + https = semi fail Graylog Central (peer support) windows , docker	8	3370	April 11, 2022
Graylog 3.3.9 enabling TLS, inputs no longer starting Graylog Central (peer support)	2	672	January 5, 2021
Need Help - New to Graylog, Certificate Trust Issue New to Graylog Community? READ-ME FIRST Guides	1	1327	September 6, 2024
Input failed to start after https Graylog Central (peer support)	13	1393	March 26, 2020

"None of the TrustManagers trust this certificate chain" when using own wildcard certificate

Related topics