topic Re: Splunk enterprise webserver not available after SSL install in Security

Splunk enterprise webserver not available after SSL install

afolabia — Fri, 10 Jan 2020 05:30:14 GMT

I'm doing a new install on a Linux Centos 7 VM . We have our own CA that issue our certs. After installing my SSL Certs and creating the web.conf in system/local to use the certs, and restarting splunk i get Waiting for web server at https://127.0.0.1:8000 to be available... and then web server not available. If I point back to web.conf in default, the error goes away and splunk is available. SSL is enable and port is also included in the .conf file. What am i missing?

Re: Splunk enterprise webserver not available after SSL install

skalliger — Fri, 10 Jan 2020 09:55:37 GMT

If the web server is not starting, it's most likely due to an error with either the certificate/the certificate chain or in decrypting it. Please take a look into the splunkd.log - there should be ERRORs visible saying why the web server can't start.

Skalli

Re: Splunk enterprise webserver not available after SSL install

afolabia — Thu, 06 Feb 2020 21:10:50 GMT

Thanks. It was a certificate issue. I had to extract the keys and convert the cert.