How to secure Windows Server 2016 Grafana with HTTPS, port 443

mrsladeris · July 25, 2022, 6:10pm

Hello all, I’m trying to implement HTTPS communication. I converted my .p7b bundle to .crt file. Also I have the private key file which has .pem extension. I’m providing my defaults.ini and sample.ini file’s screenshots below.

Default.ini file:

sample.ini file:

certificate paths:

C:\Program Files\GrafanaLabs\grafana\grafana.crt
C:\Program Files\GrafanaLabs\grafana\grafana_key.pem

Error ( still can not connect via port 443)

Do you have any suggestions guys?

yosiasz · July 25, 2022, 7:57pm

Welcome

What does your log file say about this issue? btw it can be any port, does not have to be 443
Also grafana uses default.ini not sample. so you need to make your changes to the default.ini

mrsladeris · July 25, 2022, 8:42pm

So, should I edit the default.ini file without changing its name?

mrsladeris · July 25, 2022, 8:46pm

I edited the parts that I pointed in default.ini file.

yosiasz · July 25, 2022, 8:46pm

nice. now restart the server and point your browser to https://localhot:8080

mrsladeris · July 25, 2022, 8:47pm

I’m getting HTTP ERROR 400

mrsladeris · July 25, 2022, 8:48pm

Are there any other things that should I do?

yosiasz · July 25, 2022, 8:50pm

you could show us what your log file says about this?
Also did you

did you edit default.ini
restart the grafana server in services
pointed your browser to https://localhot:8080

mrsladeris · July 25, 2022, 8:54pm

Yes, I did 3 of them. Here is my log file. It says lots of things

yosiasz · July 25, 2022, 8:56pm

I just create crt and key using openssl

openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout grafana.key -out grafana.crt

copied them over to grafana folder, change my default.ini to point to the them.
restarted my grafana server service
pointed my browser to https:\localhost:8080

works on my PC

Did you install enterprise version or OSS

mrsladeris · July 25, 2022, 8:58pm

I’m using OSS version.

Could it be related to the extension of my private key file? My cert file ends with .crt and key ends with .pem.

mrsladeris · July 25, 2022, 9:02pm

Did you make any changes to the dashboard or windows settings?

yosiasz · July 25, 2022, 9:03pm

nope. those have nothing to do with https
I think the .pem might be an issue. for testing purposes create them using openssl I pointed above and use those instead.

mrsladeris · July 25, 2022, 9:04pm

I’m gonna try that ASAP. Thank you. I will inform you about the result.

mrsladeris · July 26, 2022, 6:02am

I tried it but still not working. Btw I’m in a enterprise network. Could this be the problem?

yosiasz · July 26, 2022, 6:07am

ah, that might be it. but how are you accessing the grafana endpoint and from what pc/laptop?

what happens when you access it locally from within the server itself

mrsladeris · July 26, 2022, 6:41am

I’m accesing from the virtual server which grafana installed. I can connect via port 443 but http protocol. When I change the protocol to https I’m getting

This page isn’t working

If the problem continues, contact the site owner.

HTTP ERROR 400

So, I think there is page in the background but I can not connect.

works with port 443 too. but not working with https protocol

yosiasz · July 26, 2022, 6:52am

so your cert must be clashing with domain cert I suspect. but this is not really a grafana issue but more of networking issue you should reach to your Domain Admin to.