https://community.splunk.com/t5/Security/Why-am-I-getting-a-handshake-error-trying-to-set-cipherSuite-on/m-p/149453#M4555 <P>Fantastic! Thanks for the feedback.</P> Thu, 26 Feb 2015 13:22:24 GMT dflodstrom 2015-02-26T13:22:24Z https://community.splunk.com/t5/Security/Why-am-I-getting-a-handshake-error-trying-to-set-cipherSuite-on/m-p/149450#M4552 <P>Hello,</P> <P>I'm trying to set the cipherSuite on web.conf to allow only tls=1.2 connection</P> <PRE><CODE>[settings] enableSplunkWebSSL = 1 supportSSLV3Only = False cipherSuite = TLSv1.2:!eNULL:!aNULL </CODE></PRE> <P>After I set this, I try a restart of splunkweb, but I get this error:</P> <PRE><CODE>502 Couldn't complete HTTP request: error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure </CODE></PRE> <P>I found the article on the Splunk blog:</P> <P><A href="http://blogs.splunk.com/2014/10/22/mitigating-the-poodle-attack-in-splunk/">http://blogs.splunk.com/2014/10/22/mitigating-the-poodle-attack-in-splunk/</A></P> <P>Any idea how to solve this?</P> <P>Thanks</P> Mon, 23 Feb 2015 15:50:31 GMT https://community.splunk.com/t5/Security/Why-am-I-getting-a-handshake-error-trying-to-set-cipherSuite-on/m-p/149450#M4552 arber 2015-02-23T15:50:31Z https://community.splunk.com/t5/Security/Why-am-I-getting-a-handshake-error-trying-to-set-cipherSuite-on/m-p/149451#M4553 <P>I assume you're trying to resolve POODLE? To enable TLS only I use this:</P> <P>[settings]<BR /> sslVersions = tls<BR /> cipherSuite = AES256-SHA:AES128-SHA:DES-CBC3-SHA<BR /> enableSplunkWebSSL = 1</P> Tue, 24 Feb 2015 21:12:02 GMT https://community.splunk.com/t5/Security/Why-am-I-getting-a-handshake-error-trying-to-set-cipherSuite-on/m-p/149451#M4553 dflodstrom 2015-02-24T21:12:02Z https://community.splunk.com/t5/Security/Why-am-I-getting-a-handshake-error-trying-to-set-cipherSuite-on/m-p/149452#M4554 <P>Thanks,</P> <P>i added just the sslVersion and seemd to work. The vulnerability is not present anymore. </P> Thu, 26 Feb 2015 09:08:31 GMT https://community.splunk.com/t5/Security/Why-am-I-getting-a-handshake-error-trying-to-set-cipherSuite-on/m-p/149452#M4554 arber 2015-02-26T09:08:31Z https://community.splunk.com/t5/Security/Why-am-I-getting-a-handshake-error-trying-to-set-cipherSuite-on/m-p/149453#M4555 <P>Fantastic! Thanks for the feedback.</P> Thu, 26 Feb 2015 13:22:24 GMT https://community.splunk.com/t5/Security/Why-am-I-getting-a-handshake-error-trying-to-set-cipherSuite-on/m-p/149453#M4555 dflodstrom 2015-02-26T13:22:24Z https://community.splunk.com/t5/Security/Why-am-I-getting-a-handshake-error-trying-to-set-cipherSuite-on/m-p/149454#M4556 <P>This helped me too. Thanks!</P> Wed, 26 Aug 2015 21:49:10 GMT https://community.splunk.com/t5/Security/Why-am-I-getting-a-handshake-error-trying-to-set-cipherSuite-on/m-p/149454#M4556 masonmorales 2015-08-26T21:49:10Z https://community.splunk.com/t5/Security/Why-am-I-getting-a-handshake-error-trying-to-set-cipherSuite-on/m-p/149455#M4557 <P>Glad to help, make sure you up vote! <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span></P> Thu, 27 Aug 2015 00:25:51 GMT https://community.splunk.com/t5/Security/Why-am-I-getting-a-handshake-error-trying-to-set-cipherSuite-on/m-p/149455#M4557 dflodstrom 2015-08-27T00:25:51Z https://community.splunk.com/t5/Security/Why-am-I-getting-a-handshake-error-trying-to-set-cipherSuite-on/m-p/149456#M4558 <P>Great solution. It is working fine</P> Thu, 30 Nov 2017 06:10:08 GMT https://community.splunk.com/t5/Security/Why-am-I-getting-a-handshake-error-trying-to-set-cipherSuite-on/m-p/149456#M4558 sunilmodi1 2017-11-30T06:10:08Z