topic Re: Splunk Enterprise Windows - openssl.cnf file default location in Security

Splunk Enterprise Windows - openssl.cnf file default location?

NK — Fri, 09 Jun 2023 15:14:48 GMT

WARNING: can't open config file: C:\\gitlab_runner\\builds\\build_home\\splunk/ssl/openssl.cnf

So why is the default location of openssl.cnf not %SPLUNK_HOME% ?

C:\Splunk>%SPLUNK_HOME%\bin\openssl version -d OPENSSLDIR: "C:\\gitlab_runner\\builds\\build_home\\splunk/ssl"

Do I need to create the above "gitlab_runner" directory structure to suppress the warnings?

(Using Splunk Enterprise Windows v8.2.10)

Re: Splunk Enterprise Windows - openssl.cnf file default location

NK — Fri, 09 Jun 2023 14:46:33 GMT

Discovered when I was doing the following:

C:\Splunk>%SPLUNK_HOME%\bin\openssl x509 -enddate -noout -in %SPLUNK_HOME%\etc\auth\server.pem WARNING: can't open config file: C:\\gitlab_runner\\builds\\build_home\\splunk/ssl/openssl.cnf notAfter=May 17 23:44:06 2026 GMT

Re: Splunk Enterprise Windows - openssl.cnf file default location

inventsekar — Fri, 09 Jun 2023 21:53:21 GMT

WARNING: can't open config file: C:\\gitlab_runner\\builds\\build_home\\splunk/ssl/openssl.cnf

the path was configured mistakenly i think. you can see the first portion is windows specific path and the last portion high lighted above, its linux specific..

so, your conf file should have path like this:
C:\\gitlab_runner\\builds\\build_home\\splunk\\ssl\\openssl.cnf

Re: Splunk Enterprise Windows - openssl.cnf file default location

NK — Fri, 09 Jun 2023 22:52:16 GMT

@inventsekar wrote:
the path was configured mistakenly i think.

Where is that path configured in a Windows Splunk Enterprise installation?

Update:

Looks like @rbreton answered it here in 2017!

I need another Windows environment variable:

OPENSSL_CONF = %SPLUNK_HOME%\openssl.cnf