Page 2 of 2
Re: XI apply confuration| config verification never complets
Posted: Tue Apr 11, 2017 10:31 am
by ssax
This is likely caused by hardening the SSLProtocol and/or SSLCipherSuite in your apache configs.
Please run this command and attach the resulting /tmp/httpdconfigs.zip file:
Code: Select all
zip -r /tmp/httpdconfigs.zip /etc/httpd/conf/httpd.conf /etc/httpd/conf.d
Thank you
Re: XI apply confuration| config verification never complets
Posted: Wed Apr 12, 2017 12:38 am
by strmon
Configuration uploaded.
httpdconfigs.zip
Re: XI apply confuration| config verification never complets
Posted: Wed Apr 12, 2017 10:00 am
by ssax
I think there are multiple things going on here.
Please make sure that you've made the
3 changes from page 5 of this document, specifically:
- Make sure the
Admin > Program URL is using http
s://.
- Make sure the
CCM > Settings > Server Protocol is set to
HTTPS
- Make sure that you have
$cfg['use_https'] = true; in your
/usr/local/nagiosxi/html/config.inc.php
https://assets.nagios.com/downloads/nag ... s%20XI.pdf
Then take the attached file and replace this file:
Then restart apache:
Then try to apply configuration and let us know the results.
The apache hardening to TLS1.2 and the SSLCipherSuite taken from here:
https://access.redhat.com/documentation ... ation.html
https://raymii.org/s/tutorials/Strong_S ... ache2.html
Please run them by your security team.
Thank you