topic unable to access the webUI, and im getting this error in my splunkd.log..anyone know how to fix this? in Security

unable to access the webUI, and im getting this error in my splunkd.log..anyone know how to fix this?

jbsplunk — Fri, 27 Jan 2012 18:53:03 GMT

01-24-2012 17:35:39.483 -0800 ERROR SSLCommon - Can't read key file /opt/splunk/etc/auth/server.pem errno=101077092 error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt.
01-24-2012 17:35:39.483 -0800 ERROR HTTPServer - SSL context could not be created - error in cert or password is wrong
01-24-2012 17:35:39.483 -0800 ERROR HTTPServer - SSL will not be enable

Re: unable to access the webUI, and im getting this error in my splunkd.log..anyone know how to fix this?

Sqig — Fri, 27 Jan 2012 19:01:09 GMT

A few things come to mind initially.

Did your /opt/splunk/etc/auth/splunk.secret file change?
Are you perhaps running Splunk as a different user than usual? For example, if you used to run it as user "root" and are now trying to run it as user "splunk", some things won't work until you chown -R your entire Splunk hierarchy.

Re: unable to access the webUI, and im getting this error in my splunkd.log..anyone know how to fix this?

Chubbybunny — Fri, 27 Jan 2012 20:09:35 GMT

I just had a similar problem where my server.conf was configured with the incorrect password:

[sslConfig]
sslKeysfilePassword = KingOfKrunk

You can either edit (sever.conf) and enter the correct password for [sslconfig] 'sslKeysfilePassword' to decrypt server.pem OR generate a new signed cert and key pair using:

$SPLUNK_HOME/bin/genSignedServerCert.sh

this script will allow you to enter a new PEM pass phrase which will need to be transfer into server.conf

Re: unable to access the webUI, and im getting this error in my splunkd.log..anyone know how to fix this?

dlang — Thu, 14 Jun 2012 20:05:47 GMT

as of 4.3

NOTE: This script is deprecated. Instead, use "splunk createssl server-cert".

Re: unable to access the webUI, and im getting this error in my splunkd.log..anyone know how to fix this?

watsm10 — Mon, 30 Jun 2014 09:34:04 GMT

We just encountered the same problem after upgrading from Splunk 5 to Splunk 6.1. We overcame the issue by commenting out the [sslconfig] stanza in server.conf and restarting splunkd. This forces Splunk to generate a new SSL password and all checks passed on start up.

Re: unable to access the webUI, and im getting this error in my splunkd.log..anyone know how to fix this?

sbarr0 — Tue, 20 Jan 2015 18:54:32 GMT

This worked perfectly for me.

Thank you!

Re: unable to access the webUI, and im getting this error in my splunkd.log..anyone know how to fix this?

neelamsantosh — Thu, 28 Jan 2016 14:07:53 GMT

Superb, Thanks.

Re: unable to access the webUI, and im getting this error in my splunkd.log..anyone know how to fix this?

season88481 — Mon, 08 Apr 2019 21:43:03 GMT

In my case, since I am not using any SSL encryption for my test Splunk instance. I simply backup/remove both /opt/splunk/etc/system/local/server.conf and the /opt/splunk/etc/auth/server.pem file. Then restart splunkd, this fix my issue.

Re: unable to access the webUI, and im getting this error in my splunkd.log..anyone know how to fix this?

WumboJumbo675 — Thu, 04 Jul 2024 18:05:59 GMT

Thanks so much. This 10 year old post helped me resolve my issue!