Problem with upgrade Graylog from 3.3 to 4.0.13

Hello,

I might be able to help but first how did you perform you upgrade? And what documentation did you use?

  • What version of java do you have?
  • Did you make sure all your Plugin are the same version?
  • Does Graylog have access to directories needed?

chown graylog:graylog -R /etc/graylog/

  • Did you check all the services?
systemctl status graylog-server
systemctl status elasticsearch
systemctl status mongodb
bouncycastle.pkcs.PKCSException: unable to read encrypted data: JCE cannot authenticate the provider BC
bouncycastle.pkcs.PKCS8EncryptedPrivateKeyInfo.decryptPrivateKeyInfo(Unknown Source)
graylog2.shared.security.tls.PemKeyStore.generateKeySpec(PemKeyStore.java:68
graylog2.shared.security.tls.PemKeyStore.doBuildKeyStore(PemKeyStore.java:99) ~[graylog.jar:?]     at org.graylog2.shared.security.tls.PemKeyStore.buildKeyStore(PemKeyStore.java:85)

After looking over your logs it seams like a problem with Keystore or maybe you certificates. Or even maybe access to either one might be the problem.

I cant tell for sure unless your able to share more information of your graylog configurations.

I’m assuming at this point maybe you have HTTPS enabled?
Again, I am assuming you may have an LDAP/AD authentication service enabled?

I’m not sure about that, judging from your log file it shows a shutdown

2021-10-19T22:21:25.662+02:00 INFO  [Server] SIGNAL received. Shutting down.
2021-10-19T22:21:25.664+02:00 INFO  [GracefulShutdown] Graceful shutdown initiated.
2021-10-19T22:21:25.665+02:00 INFO  [GracefulShutdown] Node status: [Halting [LB:DEAD]]. Waiting <3sec> for possible load balancers to recognize state change.
2021-10-19T22:21:29.666+02:00 INFO  [GracefulShutdown] Goodbye.

I found this post maybe there is something in there that might help

1 Like