{"action":"closed","issue":{"url":"https://api.github.com/repos/Graylog2/graylog2-server/issues/818","labels_url":"https://api.github.com/repos/Graylog2/graylog2-server/issues/818/labels{/name}","comments_url":"https://api.github.com/repos/Graylog2/graylog2-server/issues/818/comments","events_url":"https://api.github.com/repos/Graylog2/graylog2-server/issues/818/events","html_url":"https://github.com/Graylog2/graylog2-server/issues/818","id":52050191,"number":818,"title":"[0.92] Self-signed SSL/TLS generation errors","user":{"login":"mmcguinn","id":1275809,"avatar_url":"https://avatars.githubusercontent.com/u/1275809?v=3","gravatar_id":"","url":"https://api.github.com/users/mmcguinn","html_url":"https://github.com/mmcguinn","followers_url":"https://api.github.com/users/mmcguinn/followers","following_url":"https://api.github.com/users/mmcguinn/following{/other_user}","gists_url":"https://api.github.com/users/mmcguinn/gists{/gist_id}","starred_url":"https://api.github.com/users/mmcguinn/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mmcguinn/subscriptions","organizations_url":"https://api.github.com/users/mmcguinn/orgs","repos_url":"https://api.github.com/users/mmcguinn/repos","events_url":"https://api.github.com/users/mmcguinn/events{/privacy}","received_events_url":"https://api.github.com/users/mmcguinn/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/Graylog2/graylog2-server/labels/bug","name":"bug","color":"e11d21"}],"state":"closed","locked":false,"assignee":{"login":"bernd","id":461,"avatar_url":"https://avatars.githubusercontent.com/u/461?v=3","gravatar_id":"","url":"https://api.github.com/users/bernd","html_url":"https://github.com/bernd","followers_url":"https://api.github.com/users/bernd/followers","following_url":"https://api.github.com/users/bernd/following{/other_user}","gists_url":"https://api.github.com/users/bernd/gists{/gist_id}","starred_url":"https://api.github.com/users/bernd/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bernd/subscriptions","organizations_url":"https://api.github.com/users/bernd/orgs","repos_url":"https://api.github.com/users/bernd/repos","events_url":"https://api.github.com/users/bernd/events{/privacy}","received_events_url":"https://api.github.com/users/bernd/received_events","type":"User","site_admin":false},"milestone":{"url":"https://api.github.com/repos/Graylog2/graylog2-server/milestones/31","labels_url":"https://api.github.com/repos/Graylog2/graylog2-server/milestones/31/labels","id":872659,"number":31,"title":"1.0.0","description":"","creator":{"login":"joschi","id":43951,"avatar_url":"https://avatars.githubusercontent.com/u/43951?v=3","gravatar_id":"","url":"https://api.github.com/users/joschi","html_url":"https://github.com/joschi","followers_url":"https://api.github.com/users/joschi/followers","following_url":"https://api.github.com/users/joschi/following{/other_user}","gists_url":"https://api.github.com/users/joschi/gists{/gist_id}","starred_url":"https://api.github.com/users/joschi/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/joschi/subscriptions","organizations_url":"https://api.github.com/users/joschi/orgs","repos_url":"https://api.github.com/users/joschi/repos","events_url":"https://api.github.com/users/joschi/events{/privacy}","received_events_url":"https://api.github.com/users/joschi/received_events","type":"User","site_admin":false},"open_issues":7,"closed_issues":31,"state":"open","created_at":"2014-11-19T11:46:12Z","updated_at":"2015-01-14T20:12:45Z","due_on":null,"closed_at":null},"comments":3,"created_at":"2014-12-15T22:50:25Z","updated_at":"2015-01-14T20:12:45Z","closed_at":"2015-01-14T20:12:45Z","body":"(I realize I posted to the mailing list previously, but after I confirmed that the auto generate was being triggered I thought here might be more appropriate)\r\n\r\nI've been trying to use the ability to autogenerate an SSL cert introduced in 0.92, but I've been unable to get it to work. I changed my config URIs to https, set rest_enable_tls to true, and did not set any other SSL/TLS config information. From the server log:\r\n\r\n```\r\n2014-12-15T16:13:15.497-05:00 INFO  [RestApiService] rest_tls_cert_file or rest_tls_key_file is empty. Using self-signed certificates instead.\r\n2014-12-15T16:13:15.513-05:00 INFO  [RestApiService] Started REST API at <https://10.50.0.35:12900/>\r\n2014-12-15T16:13:15.515-05:00 INFO  [ServiceManagerListener] Services are healthy\r\n2014-12-15T16:13:15.517-05:00 INFO  [InputSetupService] Triggering launching persisted inputs, node transitioned from Uninitialized [LB:DEAD] to Running [LB:ALIVE]\r\n2014-12-15T16:13:15.520-05:00 INFO  [Main] Services started, startup times in ms: {InputSetupService [RUNNING]=6, MetricsReporterService [RUNNING]=15, GroovyShellSetupService [RUNNING]=15, PeriodicalsService [RUNNING]=32, OutputSetupServ\r\nice [RUNNING]=34, BufferSynchronizerService [RUNNING]=35, DashboardRegistryService [RUNNING]=50, ProcessBufferService [RUNNING]=1824, IndexerSetupService [RUNNING]=3373, RestApiService [RUNNING]=7131}\r\n2014-12-15T16:13:15.525-05:00 INFO  [Main] Graylog2 Server up and running.\r\n```\r\n... (inputs start up etc) ...\r\n\r\nThen this repeatedly:\r\n```\r\n2014-12-15T16:13:25.196-05:00 ERROR [NettyContainer] Uncaught exception during jersey resource handling\r\norg.jboss.netty.handler.ssl.NotSslRecordException: not an SSL/TLS record: 474554202f73797374656d2f636c75737465722f6e6f646520485454502f312e310d0a486f73743a2031302e35302e302e33353a31323930300d0a4163636570743a206170706c69636174696f6e2f6a736f6e0d0a4163636570743a206170706c69636174696f6e2f6a736f6e3b20636861727365743d7574662d380d0a4163636570742d436861727365743a207574662d380d0a436f6e6e656374696f6e3a20636c6f73650d0a557365722d4167656e743a20677261796c6f67322d7765622f302e39322e300d0a0d0a\r\n        at org.jboss.netty.handler.ssl.SslHandler.decode(SslHandler.java:923)\r\n        at org.jboss.netty.handler.codec.frame.FrameDecoder.callDecode(FrameDecoder.java:425)\r\n        at org.jboss.netty.handler.codec.frame.FrameDecoder.messageReceived(FrameDecoder.java:303)\r\n        at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:70)\r\n        at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564)\r\n        at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:559)\r\n        at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:268)\r\n        at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:255)\r\n        at org.jboss.netty.channel.socket.nio.NioWorker.read(NioWorker.java:88)\r\n        at org.jboss.netty.channel.socket.nio.AbstractNioWorker.process(AbstractNioWorker.java:108)\r\n        at org.jboss.netty.channel.socket.nio.AbstractNioSelector.run(AbstractNioSelector.java:318)\r\n        at org.jboss.netty.channel.socket.nio.AbstractNioWorker.run(AbstractNioWorker.java:89)\r\n        at org.jboss.netty.channel.socket.nio.NioWorker.run(NioWorker.java:178)\r\n        at org.jboss.netty.util.ThreadRenamingRunnable.run(ThreadRenamingRunnable.java:108)\r\n        at org.jboss.netty.util.internal.DeadLockProofWorker$1.run(DeadLockProofWorker.java:42)\r\n        at com.codahale.metrics.InstrumentedExecutorService$InstrumentedRunnable.run(InstrumentedExecutorService.java:176)\r\n        at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)\r\n        at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)\r\n        at com.codahale.metrics.InstrumentedThreadFactory$InstrumentedRunnable.run(InstrumentedThreadFactory.java:66)\r\n        at java.lang.Thread.run(Thread.java:744)\r\n```\r\n\r\nI've had a look at the commit that added the auto generate support, and I don't think I'm missing anything in the config (and the log indicating it is trying to self-sign in there). Let me know if any other specific information would be helpful and I'd be happy to provide it. The install was done using the RPMs via the chef cookbook.\r\n"}}