@@ -258,7 +258,16 @@ Restart Telegraf using the updated configuration file.
258
258
259
259
## Troubleshoot TLS
260
260
261
- ### 1. Check InfluxDB logs
261
+ Identify and resolve issues after activating TLS.
262
+
263
+ - [ Check InfluxDB logs] ( #check-influxdb-logs )
264
+ - [ Verify certificate and key files] ( #verify-certificate-and-key-files )
265
+ - [ Test with OpenSSL] ( #test-with-openssl )
266
+ - [ Check file permissions] ( #check-file-permissions )
267
+ - [ Verify TLS configuration] ( #verify-tls-configuration )
268
+ - [ Update OpenSSL and InfluxDB] ( #update-openssl-and-influxdb )
269
+
270
+ ### Check InfluxDB logs
262
271
263
272
Review the InfluxDB logs for any error messages or warnings about the issue.
264
273
@@ -269,7 +278,7 @@ msg="http: TLS handshake error from [::1]:50476:
269
278
remote error: tls: illegal parameter" log_id=0rqN8H_0000 service=http
270
279
```
271
280
272
- ### 2. Verify certificate and key Files
281
+ ### Verify certificate and key Files
273
282
274
283
To ensure that the certificate and key files are correct and match each other,
275
284
enter the following command in your terminal:
@@ -279,7 +288,16 @@ openssl x509 -noout -modulus -in /etc/ssl/influxdb-selfsigned.crt | openssl md5
279
288
openssl rsa -noout -modulus -in /etc/ssl/influxdb-selfsigned.key | openssl md5
280
289
```
281
290
282
- ### 3. Check file permissions
291
+ ### Test with OpenSSL
292
+
293
+ Use OpenSSL to test the server's certificate and key--for example, enter the
294
+ following command in your terminal:
295
+
296
+ ``` bash
297
+ openssl s_client -connect localhost:8086 -CAfile /etc/ssl/influxdb-selfsigned.crt
298
+ ```
299
+
300
+ ### Check file permissions
283
301
284
302
Ensure that the InfluxDB process has read access to the certificate and key
285
303
files--for example, enter the following command to set file permissions:
@@ -289,22 +307,13 @@ sudo chmod 644 /etc/ssl/influxdb-selfsigned.crt
289
307
sudo chmod 600 /etc/ssl/influxdb-selfsigned.key
290
308
```
291
309
292
- ### 4. Verify TLS configuration
310
+ ### Verify TLS configuration
293
311
294
312
Ensure that the TLS configuration in InfluxDB is correct.
295
313
Check the paths to the certificate and key files in the InfluxDB configuration
296
314
or command line flags.
297
315
298
- ### 5. Test with OpenSSL
299
-
300
- Use OpenSSL to test the server's certificate and key--for example, enter the
301
- following command in your terminal:
302
-
303
- ``` bash
304
- openssl s_client -connect localhost:8086 -CAfile /etc/ssl/influxdb-selfsigned.crt
305
- ```
306
-
307
- ### 6. Update OpenSSL and InfluxDB
316
+ ### Update OpenSSL and InfluxDB
308
317
309
318
Ensure that you are using the latest versions of OpenSSL and InfluxDB, as
310
319
updates may include fixes for TLS-related issues.
0 commit comments