[graylog2] Re: javax.net.ssl.SSLPeerUnverifiedException: Hostname 10.22.5.24 not verified - https

2017-02-03 Thread Giwenn Launay
Hi Thank you very much it is good rest_transport_uri which(who) was badly configured =) I already have try to configure him(it) but in vain Meric very once again In the next one Jochen -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsub

[graylog2] Re: javax.net.ssl.SSLPeerUnverifiedException: Hostname 10.22.5.24 not verified - https

2017-02-03 Thread Jochen Schalanda
Hi Giwenn, On Friday, 3 February 2017 10:04:51 UTC+1, Giwenn Launay wrote: > > It's good? > As long as you're using serv-XXX-log-2.XXX.XXX.com in your rest_transport_uri setting, it should be fine. Cheers, Jochen -- You received this message because you are subscribed to the Google Groups "

[graylog2] Re: javax.net.ssl.SSLPeerUnverifiedException: Hostname 10.22.5.24 not verified - https

2017-02-03 Thread Giwenn Launay
And this is what I puts when I to create my certificate: Country Name (2 letter code) [XX]:FR State or Province Name (full name) []:France Locality Name (eg, city) [Default City]:XXX Organization Name (eg, company) [Default Company Ltd]: Organizational Unit Name (eg, section) []:Info Common N

[graylog2] Re: javax.net.ssl.SSLPeerUnverifiedException: Hostname 10.22.5.24 not verified - https

2017-02-03 Thread Giwenn Launay
Hi, I have already tried with a different common name ex: serv-XX-log-2. XXX.XXX.com but always the same error. On the other hand when I created my certificate, he does not ask me to inform the field AltSubjName, it is normal? Cheers, Giwenn -- You received this message because you are subscr

[graylog2] Re: javax.net.ssl.SSLPeerUnverifiedException: Hostname 10.22.5.24 not verified - https

2017-02-02 Thread Jochen Schalanda
Hi Giwenn, what are the attributes of your self-signed certificate, especially the CommonName (CN) and optionally the AltSubjName? In your first message, it looks like it was CN=10.22.5.24:9000, which is wrong (it has to be the host name of the Graylog node, i. e. CN=10.22.5.24 or CN=graylog.e

[graylog2] Re: javax.net.ssl.SSLPeerUnverifiedException: Hostname 10.22.5.24 not verified - https

2017-02-02 Thread Giwenn Launay
Hi Jochen, Here are the commands that I pass to put my server graylog in HTTPS: 1- openssl req -x509 -days 7300 -nodes -newkey rsa:2048 -keyout graylogkey.pem -out graycert.pem 2- openssl pkcs8 -in graylogkey.pem -topk8 -nocrypt -out graykey.pem 3- configuration this server.conf: rest_enab

[graylog2] Re: javax.net.ssl.SSLPeerUnverifiedException: Hostname 10.22.5.24 not verified - https

2017-02-02 Thread Jochen Schalanda
Hi Giwenn, On Thursday, 2 February 2017 14:20:17 UTC+1, Giwenn Launay wrote: > > You have another solution ??? > What didn't work with the one outlined in the Graylog documentation? Cheers, Jochen -- You received this message because you are subscribed to the Google Groups "Graylog Users" gr

[graylog2] Re: javax.net.ssl.SSLPeerUnverifiedException: Hostname 10.22.5.24 not verified - https

2017-02-02 Thread Giwenn Launay
You have another solution ??? For more than 2 weeks I have been trying to solve this error Thank =) -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+un

[graylog2] Re: javax.net.ssl.SSLPeerUnverifiedException: Hostname 10.22.5.24 not verified - https

2017-02-02 Thread Giwenn Launay
Yes, I added GRAYLOG_SERVER_JAVA_OPTS= "-Djavax.net.ssl.trustStore=/etc/graylog/certificate/cacerts.jks" in the /etc/sysconfig/graylog-server And I did not change the password by default Thank you for the speed of your answer -- You received this message because you are subscribed to the Goog

[graylog2] Re: javax.net.ssl.SSLPeerUnverifiedException: Hostname 10.22.5.24 not verified - https

2017-02-02 Thread Giwenn Launay
Yes, I added GRAYLOG_SERVER_JAVA_OPTS= "-Djavax.net.ssl.trustStore=/etc/graylog/certificate/cacerts.jks" in the /etc/sysconfig/graylog-server And I did not change the password by default Thank you for the speed of your answer On Thursday, February 2, 2017 at 12:55:42 PM UTC+1, Jochen Schalanda

[graylog2] Re: javax.net.ssl.SSLPeerUnverifiedException: Hostname 10.22.5.24 not verified - https

2017-02-02 Thread Jochen Schalanda
Hi Giwenn, you have to add your self-signed certificate to the JVM's trust store: http://docs.graylog.org/en/2.1/pages/configuration/https.html#adding-a-self-signed-certificate-to-the-jvm-trust-store Cheers, Jochen On Thursday, 2 February 2017 12:43:47 UTC+1, Giwenn Launay wrote: > > Hello, >