Hi Marcio, is Graylog using HTTPS on the backend (i. e. the web interface listener on port 9000 and the REST API listener on port 12900)?
FWIW, it usually doesn't make too much sense to use HTTPS in the backend (Graylog) and in the frontend (Apache httpd as reverse proxy). Cheers, Jochen On Sunday, 12 June 2016 21:35:39 UTC+2, Marcio Costa wrote: > > Hello friends > > I'm trying use https to access my graylog 2.0 install, but I get this > error in apache logs: > > [Sun Jun 12 16:27:27.076739 2016] [proxy:error] [pid 2782] (111)Connection > refused: AH00957: HTTPS: attempt to connect to 192.168.25.23:9000 ( > logs.example.com) failed > [Sun Jun 12 16:27:27.076787 2016] [proxy:error] [pid 2782] AH00959: > ap_proxy_connect_backend disabling worker for (logs.example.com) for 60s > [Sun Jun 12 16:27:27.076801 2016] [proxy_http:error] [pid 2782] [client > 192.168.25.7:61992] AH01114: HTTP: failed to make connection to backend: > logs.example.com > [Sun Jun 12 16:27:27.986754 2016] [proxy:error] [pid 2780] (111)Connection > refused: AH00957: HTTPS: attempt to connect to 192.168.25.23:9000 ( > logs.example.com) failed > [Sun Jun 12 16:27:27.987008 2016] [proxy:error] [pid 2780] AH00959: > ap_proxy_connect_backend disabling worker for (logs.example.com) for 60s > [Sun Jun 12 16:27:27.987027 2016] [proxy_http:error] [pid 2780] [client > 192.168.25.7:61993] AH01114: HTTP: failed to make connection to backend: > logs.example.com > > > Here my graylog.conf: > > <VirtualHost *:443> > ServerName logs.example.com > ServerAlias logs.example.com > > SSLEngine on > SSLProtocol all -SSLv2 -SSLv3 > SSLCertificateFile /etc/httpd/conf.d/logs-certificate.pem > SSLCertificateKeyFile /etc/httpd/conf.d/logs-key.pem > > ProxyRequests Off > <Proxy *> > Order deny,allow > Allow from all > </Proxy> > > sslproxyengine on > ProxyPass / https://logs.example.com:9000/ > ProxyPassReverse / https:logs.example.com:9000/ > > <Location /> > Order allow,deny > Allow from all > </Location> > </VirtualHost> > > <VirtualHost *:80> > ServerName logs.example.com > Redirect / https://logs.example.com/ > </VirtualHost> > > I will appreciate any help about this issue, thanks in advance. > > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/7e233c6f-337e-464a-9eba-a65e65bebaea%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
