I am configuring SSL for our Nagios Log Server instances.
I was able to configure on one instance of NLS successfully using https://assets.nagios.com/downloads/nag ... Server.pdf.
My question, how does this work on a NLS instance which is clustered with 2 or more instances of NLS?
Thank You,
Sampath
Configure SSL/TLS for Nagios Log Server
-
Sampath.Basireddy
- Posts: 252
- Joined: Wed Dec 14, 2016 12:30 pm
-
scottwilkerson
- DevOps Engineer
- Posts: 19396
- Joined: Tue Nov 15, 2011 3:11 pm
- Location: Nagios Enterprises
- Contact:
Re: Configure SSL/TLS for Nagios Log Server
If you log into the web UI on multiple of the machines in the cluster you would want o do the same on each machine.
If you only view the web UI from one machine this isn't necessary.
If you only view the web UI from one machine this isn't necessary.
-
Sampath.Basireddy
- Posts: 252
- Joined: Wed Dec 14, 2016 12:30 pm
Re: Configure SSL/TLS for Nagios Log Server
We don't login to UI of either of the machines. We have a DNS Entry (CNAME) created "logserver.company.com" which points to one of the 2 servers in cluster.
-
scottwilkerson
- DevOps Engineer
- Posts: 19396
- Joined: Tue Nov 15, 2011 3:11 pm
- Location: Nagios Enterprises
- Contact:
Re: Configure SSL/TLS for Nagios Log Server
then you would want to copy the certificate to both machines and update the config on both machinesSampath.Basireddy wrote:We don't login to UI of either of the machines. We have a DNS Entry (CNAME) created "logserver.company.com" which points to one of the 2 servers in cluster.
-
Sampath.Basireddy
- Posts: 252
- Joined: Wed Dec 14, 2016 12:30 pm
Re: Configure SSL/TLS for Nagios Log Server
You mean configure SSL on both servers separately?
Since we use a CNAME to access NLS, I should be mentioning the CNAME when Certificate is Signed?
Since we use a CNAME to access NLS, I should be mentioning the CNAME when Certificate is Signed?
-
scottwilkerson
- DevOps Engineer
- Posts: 19396
- Joined: Tue Nov 15, 2011 3:11 pm
- Location: Nagios Enterprises
- Contact:
Re: Configure SSL/TLS for Nagios Log Server
Yes, you would set them up both exactly the same using the same certificate.Sampath.Basireddy wrote:You mean configure SSL on both servers separately?
Yes. The CNAME is the hostname or Common Name. You will see this on page 3 of the documentSampath.Basireddy wrote:Since we use a CNAME to access NLS, I should be mentioning the CNAME when Certificate is Signed?