Luisj5231
(Luisj5231)
April 2, 2020, 12:39am
1
Hello again.
Using the TLS, things aren’t all clear for me. Does Graylog cannot work with self-signed certificates? Or what trick should I do?
If I use a self–signed certificate Graylog would say something like
pkix path validation failed … signature check failed
I understand tha is due to the lack of CA, but I kind of newbie about certificates.
Greetings
shoothub
(Shoothub)
April 2, 2020, 8:00am
2
Luisj5231
(Luisj5231)
April 2, 2020, 6:54pm
4
Well, I found my error, adding the CA to the key store,Where is the CA? I followed the docs, only have the files cacerts.jks , cert.pem and pkcs8-plain.pem .
gsmith
(GSmith)
April 3, 2020, 3:55am
5
@Luisj5231
I dont know if this will help you but i found my solution here:
My ambient test:
-Oracle Linux 7.6 (VMware 15);
-Network: NAT;
-Graylog3, MongoDB and Elastic: running together;
Documentation base for RPM distro.
First of all, read Docs » Configuring Graylog » Using HTTPS
0- mkdir /etc/ssl/certs/graylog/ && cd /etc/ssl/certs/graylog/
1- openssl req -x509 -days 1095 -nodes -newkey rsa:2048 -config openssl-graylog.cnf -keyout pkcs5-plain.pem -out cert.pem
2- openssl pkcs8 -in pkcs5-plain.pem -topk8 -nocrypt -out pkcs8-plain.pem
3- openssl pkcs8 -in pk…
Luisj5231
(Luisj5231)
April 6, 2020, 5:47pm
6
In fact, found my error, it seems that I created the certs as root user, did it again as non root user and all Ok, thanks!
1 Like
system
(system)
Closed
April 20, 2020, 5:47pm
7
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.