Configure SSL/TLS for Nagios Log Server

This support forum board is for support questions relating to Nagios Log Server, our solution for managing and monitoring critical log data.
Locked
Sampath.Basireddy
Posts: 252
Joined: Wed Dec 14, 2016 12:30 pm

Configure SSL/TLS for Nagios Log Server

Post by Sampath.Basireddy »

I am configuring SSL for our Nagios Log Server instances.

I was able to configure on one instance of NLS successfully using https://assets.nagios.com/downloads/nag ... Server.pdf.

My question, how does this work on a NLS instance which is clustered with 2 or more instances of NLS?

Thank You,
Sampath
scottwilkerson
DevOps Engineer
Posts: 19396
Joined: Tue Nov 15, 2011 3:11 pm
Location: Nagios Enterprises
Contact:

Re: Configure SSL/TLS for Nagios Log Server

Post by scottwilkerson »

If you log into the web UI on multiple of the machines in the cluster you would want o do the same on each machine.

If you only view the web UI from one machine this isn't necessary.
Former Nagios employee
Creator:
Human Design Website
Get Your Human Design Chart
Sampath.Basireddy
Posts: 252
Joined: Wed Dec 14, 2016 12:30 pm

Re: Configure SSL/TLS for Nagios Log Server

Post by Sampath.Basireddy »

We don't login to UI of either of the machines. We have a DNS Entry (CNAME) created "logserver.company.com" which points to one of the 2 servers in cluster.
scottwilkerson
DevOps Engineer
Posts: 19396
Joined: Tue Nov 15, 2011 3:11 pm
Location: Nagios Enterprises
Contact:

Re: Configure SSL/TLS for Nagios Log Server

Post by scottwilkerson »

Sampath.Basireddy wrote:We don't login to UI of either of the machines. We have a DNS Entry (CNAME) created "logserver.company.com" which points to one of the 2 servers in cluster.
then you would want to copy the certificate to both machines and update the config on both machines
Former Nagios employee
Creator:
Human Design Website
Get Your Human Design Chart
Sampath.Basireddy
Posts: 252
Joined: Wed Dec 14, 2016 12:30 pm

Re: Configure SSL/TLS for Nagios Log Server

Post by Sampath.Basireddy »

You mean configure SSL on both servers separately?

Since we use a CNAME to access NLS, I should be mentioning the CNAME when Certificate is Signed?
scottwilkerson
DevOps Engineer
Posts: 19396
Joined: Tue Nov 15, 2011 3:11 pm
Location: Nagios Enterprises
Contact:

Re: Configure SSL/TLS for Nagios Log Server

Post by scottwilkerson »

Sampath.Basireddy wrote:You mean configure SSL on both servers separately?
Yes, you would set them up both exactly the same using the same certificate.
Sampath.Basireddy wrote:Since we use a CNAME to access NLS, I should be mentioning the CNAME when Certificate is Signed?
Yes. The CNAME is the hostname or Common Name. You will see this on page 3 of the document
Former Nagios employee
Creator:
Human Design Website
Get Your Human Design Chart
Locked