TLS on Graylog 3.1

[Ponet (Jesse Hills)]

@Luisj5231

keytool -importcert -keystore /usr/share/graylog/certs/ -storepass secret -alias graylog-self-signed -file cert.pem

Not sure on that command…
/usr/share/graylog/certs/ does not look like the path to a file.

You will also need to specify the keystore file Java should use with the flag
-Djavax.net.ssl.trustStore=/path/to/cacerts.jks

This post may give you some more information:

SSL Certs - Lesson Learned

After 3 days of fighting with certs to get my instance back up and running I’d like to share my thoughts about the process and what major suggestion I would add to the documentation. First of all the suggestion. COMMON NAME: need to be more specific that the common name needs to be EXACTLY what you set in the rest_uri and web_uri otherwise you’ll get java errors like “javax.net.ssl.SSLPeerUnverifiedException: Hostname not verified:” or other similarly cryptic messages. I would have been done 3…