topic Re: Certificate generation failed : Splunkd port communication will not work in Security

Certificate generation failed : Splunkd port communication will not work

dkeck — Wed, 06 Sep 2017 11:01:08 GMT

Hi,

On start up I am getting this error:

The certificate generation script did not generate the certificate file: /opt/splunk/etc/auth/<folder>/*.pem. Splunkd port communication will not work. SSL certificate generation failed

I try to change the server.pem and rootCA. So in server.conf I just changed the caCertFile, caPath and sslKeyfile to point to the new certificates. (I know these are deprecated but It didn´t work with the new once either).

Is anyone familiar with this, and can tell me what the cause is?

Thank you

Re: Certificate generation failed : Splunkd port communication will not work

dkeck — Thu, 07 Sep 2017 06:24:55 GMT

No one? 🙂

Re: Certificate generation failed : Splunkd port communication will not work

woodcock — Sun, 10 Sep 2017 05:44:35 GMT

Start over completely and do it like this (it is quite complicated and VERY easy to trash your system):

Who: George Starcher and Duane Waddle, Defense Point Security
What: Avoid the SSLippery SSLope of Default SSL
Recording: https://splunk.webex.com/splunk/lsr.php?RCID=da90ccae281af46da9e4a3b46c076a0b
Slides: Media:SplunkTrustApril-SSLipperySlopeRevisited.pdf