topic Re: Parameters must be in the form '-parameter value' error when trying to sign certificate. in Security

Parameters must be in the form '-parameter value' error when trying to sign certificate.

CaptainHook — Fri, 23 Feb 2018 20:31:27 GMT

Does anyone have an idea on why I am returning the following error:
Parameters must be in the form '-parameter value'

When trying to run the below command
$SPLUNK_HOME/bin/splunk cmd openssl x509 -req -in myCACertificate.csr -sha512
-signkey myCAPrivateKey.key -CAcreateserial -out myCACertificate.pem -days 1095

Reference: http://docs.splunk.com/Documentation/Splunk/7.0.2/Security/Howtoself-signcertificates

Thank you.

Re: Parameters must be in the form '-parameter value' error when trying to sign certificate.

somesoni2 — Fri, 23 Feb 2018 20:47:32 GMT

Try to type in the command instead of copying from Splunk documentation page (or anywhere else you're copying from).

Re: Parameters must be in the form '-parameter value' error when trying to sign certificate.

CaptainHook — Fri, 23 Feb 2018 20:57:46 GMT

Thanks somesoni2, Yeah, I thought of that too and it still didn't work manually typing it in.

Re: Parameters must be in the form '-parameter value' error when trying to sign certificate.

elliotproebstel — Fri, 23 Feb 2018 21:26:00 GMT

Is that a direct copy/paste from where you're trying to run it? Any chance any of those values actually contain spaces? Spitballing here.

Re: Parameters must be in the form '-parameter value' error when trying to sign certificate.

CaptainHook — Fri, 23 Feb 2018 23:32:46 GMT

Hello Elliotproebstel and thank you for your response. I did actually type in the command and NOT copy/paste it. I had tried it both ways prior to posting the question.

Re: Parameters must be in the form '-parameter value' error when trying to sign certificate.

elliotproebstel — Sat, 24 Feb 2018 01:27:32 GMT

Sorry, I know you said above that you'd typed it directly into your command line. I was trying to ask if you had copied directly from the command line into your post, since there was nothing I could see that was askew. Sometimes people transcribe and, in the process of transcribing, accidentally obfuscate what was going wrong.

Re: Parameters must be in the form '-parameter value' error when trying to sign certificate.

CaptainHook — Sat, 24 Feb 2018 05:26:17 GMT

I misunderstood your response, sorry about that. Yes, I did copy the command from the CL to this post.

Re: Parameters must be in the form '-parameter value' error when trying to sign certificate.

CaptainHook — Sat, 24 Feb 2018 17:50:45 GMT

Does anybody have any other ideas or thoughts? Thanks in Advance.

Re: Parameters must be in the form '-parameter value' error when trying to sign certificate.

deepashri_123 — Tue, 27 Feb 2018 07:12:19 GMT

Hey CaptainHook,

Make sure the splunk home path entered is correct and try running the command:

$SPLUNK_HOME/bin/splunk cmd openssl x509 -req -in
myServerCertificate.csr -SHA512 -CA myCACertificate.pem -CAkey myCAPrivateKey.key
-CAcreateserial -out myServerCertificate.pem -days 1095

In your above command the certificate is missing

Re: Parameters must be in the form '-parameter value' error when trying to sign certificate.

sloshburch — Fri, 09 Mar 2018 14:33:15 GMT

I'm guessing the docs could have a typo on the parameter. I would suggest doing a divide and conquer. Chop off half the params and see if the same syntax message comes up. If yes, then cut in half again. If no, then use the other half. Repeat until you identify which parameter is causing the problem. Then we can pinpoint if the docs are wrong or if we made a typo in the cmd.

Re: Parameters must be in the form '-parameter value' error when trying to sign certificate.

muriithikr — Tue, 11 Jun 2024 21:49:08 GMT

Updating here for anyone who may experience the error now. When running the command on a linux host and your admin password has ! in it, enclose the password in ' e.g, 'password!' while typing the command.

Re: Parameters must be in the form '-parameter value' error when trying to sign certificate.

jc01480 — Fri, 01 Nov 2024 16:59:20 GMT

Try using single quotes for each parameter. This is how I fixed my error.

Example:

>./splunk add monitor /var/log -index 'main' -sourcetype 'linux'