Also, I don't think you NEED to open port 3000, you can try it without if 
you want after you get it working

On Thursday, March 13, 2014 9:29:54 PM UTC-4, Scotty H wrote:
>
> Are you running as root?
> I intentionally set it up not to, and used iptables to redirect the port.
>
>
>  cat /etc/sysconfig/iptables 
>
> # Generated by iptables-save v1.4.7 on Mon Feb 17 15:26:43 2014
>> *nat
>> :PREROUTING ACCEPT [2:476]
>> :POSTROUTING ACCEPT [12:1488]
>> :OUTPUT ACCEPT [12:1488]
>> -A PREROUTING -p tcp -m tcp --dport 443 -j REDIRECT --to-ports 3000
>> COMMIT
>> # Completed on Mon Feb 17 15:26:43 2014
>> # Generated by iptables-save v1.4.7 on Mon Feb 17 15:26:43 2014
>> *filter
>> :INPUT ACCEPT [0:0]
>> :FORWARD ACCEPT [0:0]
>> :OUTPUT ACCEPT [100121:51380700]
>> -A INPUT -p tcp -m tcp --dport 3000 -j ACCEPT
>> #among other rules
>> COMMIT
>> # Completed on Mon Feb 17 15:26:43 2014
>
>
>
> On Tuesday, March 11, 2014 4:59:30 PM UTC-4, Ray McCaffity wrote:
>>
>>
>> I created a self signed certificate.  ( I tested it using tomcat )
>>
>> I attempted to configure the 
>> /graylog2-web-interface/conf/graylog2-web-interface.conf file by adding 
>> these lines to the bottom of it.
>>
>> # HTTPS
>> https.keyStore=/usr/lib64/jvm/jre/lib/security/cacerts
>> #https.keyStoreType=
>> https.keyStorePassword=xxxxxxxx
>> #https.keyStoreAlgorithm=
>> https.port=443
>>
>> I have also tried to start the web interface by using 
>> "bin/graylog2-web-interface -Dhttps.port=443"
>> The only error I see is...
>>
>> [warn] play - Using generated key with self signed certificate for HTTPS. 
>> This should not be used in production.
>>
>> When I attempt to connect with a browser, it just hangs there trying to 
>> connect in a loop.
>> If I use the standard port 9000 (non-https) it works fine.
>>
>> - Ray
>>
>

-- 
You received this message because you are subscribed to the Google Groups 
"graylog2" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/d/optout.

Reply via email to