Https for kibana 3

Elastic Stack Kibana
1

Hi there!
I have ES+logstash+Kibana3 on my node.
I set up apache on 80 port for kibana, but when I try to enable https on 443 port, kibana is not loading.
My conf:

<VirtualHost *:80>
        ServerName logstash.domain.com
        DocumentRoot /var/www/kibana3
<Directory />
        AuthzLDAPAuthoritative off
        AuthName "Enter your LDAP credentials"
        AuthType Basic
        AuthBasicProvider ldap
        AuthLDAPURL "ldaps://ipaddress/cn=users,dc=int,dc=domain,dc=com?sAMAccountName?sub?(objectClass=*)"
        AuthLDAPBindDN "name"
        AuthLDAPBindPassword "pass"
        require valid-user
        Options FollowSymLinks
        AllowOverride None
</Directory>
<Directory /var/www/kibana3/>
                Options Indexes FollowSymLinks MultiViews
                AllowOverride None
                Order allow,deny
                allow from all
        </Directory>
        <Directory "/usr/lib/cgi-bin">
                AllowOverride None
                Options +ExecCGI -MultiViews +SymLinksIfOwnerMatch
                Order allow,deny
                Allow from all
        </Directory>

        ErrorLog ${APACHE_LOG_DIR}/error.log

        # Possible values include: debug, info, notice, warn, error, crit,
        # alert, emerg.
        LogLevel warn
</VirtualHost>

When I trying 443 port I enter:

<VirtualHost *:80>
    ServerName logstash.domain.com
    Redirect "/" "https://logstash.domain.com/"
</VirtualHost>

<VirtualHost *:443>
        ServerName logstash.domain.com
        SSLEngine on
        SSLCompression off
        SSLProtocol All -SSLv2 -SSLv3
        SSLCipherSuite AES128+EECDH:AES128+EDH
        SSLCertificateFile    /etc/apache2/ssl/domain.crt
        SSLCertificateKeyFile /etc/apache2/ssl/domain.key
        ...config...

And in config.js i have next: elasticsearch: "http://"+window.location.hostname+":9200"
Please, some advice!

2

What does "Kibana is not loading" mean? Is the static landing page not loading at all? Or is Kibana just enable to contact Elasticsearch?

3

It's looks like it connects with ES
Here is screenshot: http://prntscr.com/7f9m3u
I dont see any dashboards or default kibana page.

4

Checking the browser's debug console is often useful.

6

and in chrome i see
Mixed Content: The page at 'https://logstash-cloud1.domain.com/' was loaded over HTTPS, but requested an insecure XMLHttpRequest endpoint 'http://logstash-cloud1.domain.com:9200/_nodes'. This request has been blocked; the content must be served over HTTPS.(anonymous function) @ /app/app.js:9
app.js:9 Mixed Content: The page at 'https://logstash-cloud1.domain.com/#/dashboard' was loaded over HTTPS, but requested an insecure XMLHttpRequest endpoint 'http://logstash-cloud1.domain.com:9200/_nodes'. This request has been blocked; the content must be served over HTTPS.

7

I solved this problem.
I add this in apache:

ProxyRequests off
ProxyPass /elasticsearch/ http://192.168.198.210:9200/
<Location /elasticsearch/>
        ProxyPassReverse /
        SSLRequireSSL
</Location>

and in config.js I rewrite this:
elasticsearch: "http://"+window.location.hostname+":9200",
to this:
elasticsearch: "https://"+window.location.hostname+"/elasticsearch",