[graylog2] Re: How to setup tls security?

2016-06-09 Thread Earest
Work like a charm, thank you :) -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit

[graylog2] Re: How to setup tls security?

2016-06-09 Thread kaiser
Maybe you can give it a try: http://www.pc-freak.net/blog/auto-insert-password-for-a-trusted-ssl-certificate-automatically-enter-password-for-an-ssl-certificate-during-apache-startup-on-debian-lenny/ -- You received this message because you are subscribed to the Google Groups "Graylog Users" gr

[graylog2] Re: How to setup tls security?

2016-06-08 Thread Earest
Hi, Yay, the mistake come from the url form. ^^ New bug here : I try to make a vhost who make a SSLProxyRedirect to only have the site name in the url without port. But when i restart apache2, he ask for the TLS passphrase and froze until he get an answer. I'm looking for a way to provide the pa

[graylog2] Re: How to setup tls security?

2016-06-07 Thread kaiser
If you access graylog with ip you will have to add exception each time You have to access to graylog with https://.:9000 or https://.:12900 because you created the certificate with the hostname not the ip address You have to set the https link with hostname in your config server file. Cheers

[graylog2] Re: How to setup tls security?

2016-06-07 Thread Earest
It work, thank for the help! But I don't understand why i need to add an exception in my browser for the cert at port 9000 and 12900. (I had it to the trusted cert for java :s). Maybe 'cause it's a selfed signed one and my browser don't know he have to trust him ^^ -- You received this message

[graylog2] Re: How to setup tls security?

2016-06-07 Thread kaiser
keytool -genkey -alias buildforge -keyalg RSA -keysize 2048 -validity 5475 -dname "CN=.domain>" -keystore buildForgeKeyStore.p12 -storepass PASS -storetype pkcs12 -alias graylog2 keytool -importkeystore -deststorepass "***PASS***" -destkeypass "***PASS***" -destkeystore graylog.keysto

[graylog2] Re: How to setup tls security?

2016-06-06 Thread John Babio
Could someone please slap the whole thing together into one script? This troubleshooting has been consuming a bunch of time. On Monday, June 6, 2016 at 9:04:24 AM UTC-4, kaiser wrote: > > I have created my keystore like this: > > > keytool -genkey -alias buildforge -keyalg RSA -keysize 2048 -vali

[graylog2] Re: How to setup tls security?

2016-06-06 Thread kaiser
I have created my keystore like this: keytool -genkey -alias buildforge -keyalg RSA -keysize 2048 -validity 5475 -dname "CN=.domain>" -keystore buildForgeKeyStore.p12 -storepass PASS -storetype pkcs12 -alias graylog2 keytool -importkeystore -deststorepass "***PASS***" -destkeypass

Re: [graylog2] Re: How to setup tls security?

2016-06-06 Thread Benjamin LANSARD
Yes, i'm working in a company. But in that case I make a selfed signed certificate (i followed this part of the graylog doc : http://docs.graylog.org/en/2.0/pages/configuring_webif.html#https-setup and i see no CA usage ^^) 2016-06-06 13:35 GMT+02:00 kaiser : > Are you working in a company? > > I

[graylog2] Re: How to setup tls security?

2016-06-06 Thread kaiser
Are you working in a company? In that case you should ask for your enterprise certificate (with the passphrase for graylog) and do the following http://mikepilat.com/2011/05/adding-a-certificate-authority-to-the-java-runtime.html Le lundi 9 mai 2016 11:24:09 UTC+2, Earest a écrit : > > Hello,

[graylog2] Re: How to setup tls security?

2016-06-06 Thread Earest
Hi Kaizer, After some try, I'm still stuck. Here the error i get in log file : 2016-06-06T10:53:27.650+02:00 WARN [ProxiedResource] Unable to call > https://graylog.loc:12900/system/metrics/multiple on node > , caught exception: > sun.security.validator.ValidatorException: PKIX path building

[graylog2] Re: How to setup tls security?

2016-05-27 Thread kaiser
Hi Earest, did you managed to resolve your problem? Regards. Le lundi 9 mai 2016 11:24:09 UTC+2, Earest a écrit : > > Hello, > > After some hours trying to configure tls encripting without success, i > come here to ask for some help. > > *Server configuration :* > > Derbian 8 > Graylog 2.0.0 >

[graylog2] Re: How to setup tls security?

2016-05-20 Thread kaiser
I solved my problem using my keystroke file located in /opt/graylog-key/graylog.keystore regards -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+un

[graylog2] Re: How to setup tls security?

2016-05-20 Thread kaiser
Hello, I am trying to set tls security from graylog 2.0 documentation. When trying to generate graylog-key.pem and graylog-pkcs5.pem the two files are empty: -rw-r--r-- 1 root root0 20 mai 11:55 graylog-key.pem -rw-r--r-- 1 root root0 20 mai 11:56 graylog-pkcs5.pem Someone knows

[graylog2] Re: How to setup tls security?

2016-05-20 Thread kaiser
Hello, I am trying to set tls security from graylog 2.0 documentation. I have the following issue when following the instructions: read_bio:no start line:pem_lib.c:703:Expecting: ANY PRIVATE KEY My two following files are empty: -rw-r--r-- 1 root root0 20 mai 11:55 graylog-key.pem -rw-r-

[graylog2] Re: How to setup tls security?

2016-05-10 Thread Jochen Schalanda
Hi Earest, please take a look at the documentation chapter about configuring the Graylog 2.0.0 web interface: http://docs.graylog.org/en/2.0/pages/configuring_webif.html In case you're using self-signed certificates, the following FAQ entry might also be interesting for you: http://docs.gray