This support forum board is for support questions relating to
Nagios xi , our flagship commercial network monitoring solution.
scottwilkerson
DevOps Engineer
Posts: 19396Joined: Tue Nov 15, 2011 3:11 pmLocation: Nagios Enterprises
Post by scottwilkerson Tue May 22, 2012 12:56 pm
for whatever reason your key/crt aren't matching you should lcreate them again after removing the ones that are there
Code: Select all
rm -f /etc/pki/tls/certs/ca.crt /etc/pki/tls/private/ca.key /etc/pki/tls/private/ca.csr
rm -f ca.crt ca.key ca.csr
then
Code: Select all
openssl genrsa -out ca.key 2048
openssl req -new -key ca.key -out ca.csr
openssl x509 -req -days 365 -in ca.csr -signkey ca.key -out ca.crt
cp ca.crt /etc/pki/tls/certs
cp ca.key /etc/pki/tls/private/ca.key
cp ca.csr /etc/pki/tls/private/ca.csr
Finally try to restart httpd
tgfde
Posts: 233Joined: Thu May 12, 2011 7:55 am
Post by tgfde Tue May 22, 2012 2:20 pm
Ok httpd restarted ok.
scottwilkerson
DevOps Engineer
Posts: 19396Joined: Tue Nov 15, 2011 3:11 pmLocation: Nagios Enterprises
Post by scottwilkerson Tue May 22, 2012 2:37 pm
Yes, it should work fine
tgfde
Posts: 233Joined: Thu May 12, 2011 7:55 am
Post by tgfde Wed May 23, 2012 4:07 pm
Thanks everyone, I finally got SSL configured.
scottwilkerson
DevOps Engineer
Posts: 19396Joined: Tue Nov 15, 2011 3:11 pmLocation: Nagios Enterprises
Post by scottwilkerson Wed May 23, 2012 7:43 pm
Once SSL is working you should be able to remove the following from your nagios
xi .conf
Code: Select all
#NameVirtualHost *:443
<VirtualHost *:80> # Add this line
<Directory "/usr/local/nagiosxi /html">
# SSLRequireSSL
Options None
AllowOverride None
Order allow,deny
Allow from all
# Order deny,allow
# Deny from all
# Allow from 127.0.0.1
# AuthName "Nagios xi "
# AuthType Basic
# AuthUserFile /usr/local/nagiosxi /etc/htpasswd.users
# Require valid-user
</Directory> # Add this line
</VirtualHost>
and then restart apache
tgfde
Posts: 233Joined: Thu May 12, 2011 7:55 am
Post by tgfde Thu May 24, 2012 9:08 am
Hello,xi .conf but still able to access nagios via http. Please see below.xi /html">xi "xi /etc/htpasswd.usersxi /html">xi "/usr/local/nagiosxi /html"
scottwilkerson
DevOps Engineer
Posts: 19396Joined: Tue Nov 15, 2011 3:11 pmLocation: Nagios Enterprises
Post by scottwilkerson Thu May 24, 2012 9:14 am
Do you mean you can still access Nagios xi ? ie, http://<SERVERNAME>/nagiosxi /
tgfde
Posts: 233Joined: Thu May 12, 2011 7:55 am
Post by tgfde Thu May 24, 2012 10:32 am
Sorry for the confusion. I meant to say this, http://<SERVERNAME>/nagiosxi /.
scottwilkerson
DevOps Engineer
Posts: 19396Joined: Tue Nov 15, 2011 3:11 pmLocation: Nagios Enterprises
Post by scottwilkerson Thu May 24, 2012 1:18 pm
tgfde
Posts: 233Joined: Thu May 12, 2011 7:55 am
Post by tgfde Thu May 24, 2012 1:24 pm
Yes, I did. I even clreared my browser cache and was still able to access nagiosxi via http.