XI apply confuration| config verification never complets

[ssax]

This is likely caused by hardening the SSLProtocol and/or SSLCipherSuite in your apache configs.

Please run this command and attach the resulting /tmp/httpdconfigs.zip file:

Code: Select all

zip -r /tmp/httpdconfigs.zip /etc/httpd/conf/httpd.conf /etc/httpd/conf.d

Thank you

[strmon]

Configuration uploaded.

httpdconfigs.zip

[ssax]

I think there are multiple things going on here.

Please make sure that you've made the 3 changes from page 5 of this document, specifically:
- Make sure the Admin > Program URL is using https://.
- Make sure the CCM > Settings > Server Protocol is set to HTTPS
- Make sure that you have $cfg['use_https'] = true; in your /usr/local/nagiosxi/html/config.inc.php

https://assets.nagios.com/downloads/nag ... s%20XI.pdf

Then take the attached file and replace this file:

Code: Select all

/etc/httpd/conf.d/ssl.conf

Then restart apache:

Code: Select all

service httpd restart

Then try to apply configuration and let us know the results.


The apache hardening to TLS1.2 and the SSLCipherSuite taken from here:

https://access.redhat.com/documentation ... ation.html
https://raymii.org/s/tutorials/Strong_S ... ache2.html

Please run them by your security team.

Thank you