Setting up Nagios with SSL

[scheema31]

hi i have migrated my nagios from rhel 5 to rhel 7 server, i have mostly everything working.
Now i just need to get it running over HTTPS, on the older server i already had it running over HTTPS.
what would be my best/easiest approach to migrating https over to my new server.

thanks!

[Box293]

First make sure port 443 inbound is open on the local firewall.

You should be able to copy over your Apache configs and certificate from the old server to the new server, they might be:

Code: Select all

/etc/httpd/conf.d/ssl.conf
/etc/httpd/conf/httpd.conf

The following guide is for Nagios XI however the core Apache config should be similar:
https://assets.nagios.com/downloads/nag ... os%20XI.pd

[scheema31]

I have moved those files over to new server including the certificate/key files its points to,
however this stops my apache server.

[lmiltchev]

What are the errors that you see in the apache error log?

Code: Select all

tail -100 /var/log/httpd/error_log

[scheema31]

are you sure that is the log file?
I have that file but no new logs are added to it.

[dwhitfield]

could you post the output of httpd -V (note the cap V)

[tgriep]

Try running this

Code: Select all

service httpd restart

And then see if you find any errors in any of the files in this folder and post it here.

Code: Select all

/var/log/httpd

[scheema31]

hey dwhitfield
the httpd -V command give following error:
httpd: Syntax error on line 148 of /etc/httpd/conf/httpd.conf: Cannot load modules/mod_auth_kerb.so into server: /etc/httpd/modules/mod_auth_kerb.so: cannot open shared object file: No such file or directory
looks like module related, i defenatly see that the old httpd file from old server has alot of modules listed where as the new one doesnt

[scheema31]

okay i think ive fixed that error, i just commented out the modules and poinited it to the folder where they are on the new server and now apache starts fine.
However when adding the ssl.conf file i get an error running httpd -V, looks like another module related error:

Code: Select all

# httpd -V
httpd: Syntax error on line 214 of /etc/httpd/conf/httpd.conf: Syntax error on line 12 of /etc/httpd/conf.d/ssl.conf: Cannot load modules/mod_ssl.so into server: /etc/httpd/modules/mod_ssl.so: cannot open shared object file: No such file or directory

i checked in the /etc/httpd/modules/ and is not listed there

[Box293]

You might need to do this:

Code: Select all

yum install mod_ssl
service httpd configtest