# Problem in using TLS with Server Server Side auth (err 2)

**URL:** <https://community.graylog.org/t/problem-in-using-tls-with-server-server-side-auth-err-2/11423>\
**Category:** Graylog Central (peer support)\
**Tags:** sidecar\
**Created:** [July 31, 2019, 10:48am UTC](https://community.graylog.org/t/problem-in-using-tls-with-server-server-side-auth-err-2/11423 "2019-07-31T10:48:52Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Bruno](https://avatars.discourse-cdn.com/v4/letter/b/c77e96/32.png) [@Bruno](https://community.graylog.org/u/Bruno)\
**Post date:** [July 31, 2019, 10:48am UTC](https://community.graylog.org/t/problem-in-using-tls-with-server-server-side-auth-err-2/11423/1 "2019-07-31T10:48:52Z")

</div>

Hi,

I set nxlog to send security log to a GrayLog input. It works perfectly using om\_tcp but it fails with om\_tls.

The nxlog says: “**ERROR SSL certificate verification failed: unable to get issuer certificate (err: 2)**”

While I need an encrypted communication, I am not interested in mutual authentication (just server-side auth).  
Getting through the documentation ( [https://nxlog.co/documentation/nxlog-user-guide/graylog.htm](https://nxlog.co/documentation/nxlog-user-guide/graylog.htm) l), I created the following config file:

################  
define ROOT /usr/bin

 Module xm\_gelf ShortMessageLength 65536

User nxlog  
Group nxlog

Moduledir /usr/libexec/nxlog/modules  
CacheDir /var/spool/nxlog/data  
PidFile /var/log/nxlog/nxlog.pid  
LogFile /var/log/nxlog/nxlog.log  
LogLevel INFO

 Module im\_file File '/var/log/secure' PollInterval 1 SavePos True ReadFromLast True Recursive False RenameCheck False Exec $FileName = file\_name(); # Send file name with each message

########################

#### OUTPUT DEFINITION

########################  
  
\*\* Module om\_ssl\*\*  
\*\* Host XXXXX\*\*  
\*\* Port 12201\*\*  
\*\* OutputType GELF\_TCP\*\*  
\*\* #### =\> CAFile Readable by nxlog user\*\*  
\*\* CAFile /var/log/nxlog/DigiCertCA.crt\*\*  
\*\* AllowUntrusted True\*\*  
\*\* \*\*  
\*\* # These fields are needed for Graylog\*\*  
\*\* gl2\_source\_collector = '{sidecar.nodeId}’;\*\*  
\*\* collector\_node\_id = '{sidecar.nodeName}’;\*\*  
\*\* $Hostname = hostname\_fqdn();\*\*  
\*\* \*\*

 Path secureLog =\> gelf\_tls

########

I cannot find a post with a suitable solution to my problem.  
Could anyone kindly gives me an advice on this?

Regards,

Bruno

---

<div class="post-metadata">

**Author:** ![jan](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jan/32/11_2.png) [@jan](https://community.graylog.org/u/jan)\
**Post date:** [July 31, 2019, 11:00am UTC](https://community.graylog.org/t/problem-in-using-tls-with-server-server-side-auth-err-2/11423/2 "2019-07-31T11:00:01Z")

</div>

you should fix/understand certificates …

The complete error message + nxlog is pointing to this:

> <https://stackoverflow.com/questions/32400206/cant-get-nxlog-to-logstash-with-ssl-working>

the comments (read all) should give you a way to fix that.

---

<div class="post-metadata">

**Author:** ![Bruno](https://avatars.discourse-cdn.com/v4/letter/b/c77e96/32.png) [@Bruno](https://community.graylog.org/u/Bruno)\
**Post date:** [July 31, 2019, 3:33pm UTC](https://community.graylog.org/t/problem-in-using-tls-with-server-server-side-auth-err-2/11423/3 "2019-07-31T15:33:31Z")

</div>

Many Thanks,

I manage to solve the problem following the link provided by you. For those who need it, I did as follows:

1. I got all the CA certificates of chain required to verify the certificate used by the graylog input.
2. I concatenated them into a single file and I put it in my client machine.
3. I filled the field CAFile of the client’s Input with the path to the CA file.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [August 14, 2019, 3:41pm UTC](https://community.graylog.org/t/problem-in-using-tls-with-server-server-side-auth-err-2/11423/4 "2019-08-14T15:41:50Z")

</div>

Closed on August 14, 2019, 3:41pm UTC

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.