topic Splunk findout openssl version used in Security

Splunk findout openssl version used

gowthammahes — Mon, 31 Oct 2022 19:16:52 GMT

HI,

Currently I am using splunk version of Version:8.1.2. And i would like to know the openssl version which is used in splunk version. So i ran 2 commands to know the openssl version but i am getting 2 different results from that commands.

so which one do i need to consider???

1. splunk@splunkidx$ ./splunk/bin/splunk cmd openssl version
OpenSSL 1.0.2w-fips 9 Sep 2020

2.splunk@splunkidx$ openssl version
OpenSSL 1.1.1k FIPS 25 Mar 2021

Re: splunk findout openssl version used

somesoni2 — Mon, 31 Oct 2022 18:32:21 GMT

The first command give version of openssl that ships with Splunk. The second command gives openssl version installed by OS, hence the difference.

Re: Splunk findout openssl version used

sysadminorc — Tue, 01 Nov 2022 18:28:22 GMT

My testing shows Splunkforwarder 9.0.1 isn't running the vulnerable OpenSSL 3.0

[root@localhost opt]# export LD_LIBRARY_PATH=/opt/splunkforwarder/lib
[root@localhost opt]# /opt/splunkforwarder/bin/openssl version
WARNING: can't open config file: /opt/splunk-home/openssl/openssl.cnf
OpenSSL 1.0.2zf-fips 21 Jun 2022