topic Is there a way to change the certificate used for port 8089? in Security

Is there a way to change the certificate used for port 8089?

arber — Mon, 06 Oct 2014 09:55:55 GMT

Hello,
during our vulnerability assessment we found that the certificate that port 8089 uses is vulnerable as its less than 2048 bit.
We have already changed the certificate used for port 8000 to 2048 bit. Is there way to do the same even for the one used on port 8089? can we bound the same cert used for port 8000 to 8089 ?

thanks

Re: Is there a way to change the certificate used for port 8089?

jrodman — Tue, 07 Oct 2014 05:47:21 GMT

Yes, the use of your own certificate for splunkd SSL is a documented topic. See, for example http://docs.splunk.com/Documentation/Splunk/6.1.4/Security/TypesofSplunkconfigurationsthatcanuseSSL

Note that splunkd has a few odd requirements for the contents of the pem files, so I suggest you walk through the variant of the instructions that most closely matches your goals.