Graylog2 / Graylog2/graylog2-server

Build SSL Certificate Management Automation into Graylog GUI

Open
#22,362 2 comments 0 reactions 0 assignees View on GitHub
feature
Dominant language
Java
Stars
8.1k
Forks
1.1k
Avg merge
1d 20h
Merged PRs (30d)
217

Description

## What?

Installing an SSL certificate on the Graylog web interface should be an option in the Configuration section of the GUI. Users should be able to do basic certificate management:

1. Generate a CSR for a provider & install the returned certificate OR
2. Configure Let's Encrypt to automate the management of the certificate OR
3. Install a public / private key pair along with the intermediate certificate (This would apply to installing a Cloudflare origin cert for example)

## Why?

The current process for installing and maintaining an SSL certificate on the web interface is too complex. With certificates now expiring every 90 days, this creates a ton of unnecessary work for the end user as well as requires the end user to learn the nuances of using OpenSSL and adding certificates to the Java vault.

End users should be spending their time getting value of out of Graylog, not administering Linux.

## Your Environment

* Graylog Version:
* OpenSearch Version:
* MongoDB Version:
* Operating System:
* Browser version:

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.