topic Why Deployment Client talks to Server with plain HTTP instead of HTTPS? in Security https://community.splunk.com/t5/Security/Why-Deployment-Client-talks-to-Server-with-plain-HTTP-instead-of/m-p/165254#M4908 <P>Even a client have <STRONG>enableSplunkdSSL = true</STRONG>, it don't try to setup SSL and send REST request via a plain HTTP, what is refused by a server ( <CODE>SSL Error = error:1407609C:SSL routines:SSL23_GET_CLIENT_HELLO:http request</CODE>) and then logs that into the client <CODE>WARN DeploymentClient - Unable to send handshake message to deployment server. Error status is: not_connected</CODE>.</P> <P>Why?<BR /> Thanks</P> Thu, 16 Oct 2014 14:23:35 GMT JakeConcur 2014-10-16T14:23:35Z Why Deployment Client talks to Server with plain HTTP instead of HTTPS? https://community.splunk.com/t5/Security/Why-Deployment-Client-talks-to-Server-with-plain-HTTP-instead-of/m-p/165254#M4908 <P>Even a client have <STRONG>enableSplunkdSSL = true</STRONG>, it don't try to setup SSL and send REST request via a plain HTTP, what is refused by a server ( <CODE>SSL Error = error:1407609C:SSL routines:SSL23_GET_CLIENT_HELLO:http request</CODE>) and then logs that into the client <CODE>WARN DeploymentClient - Unable to send handshake message to deployment server. Error status is: not_connected</CODE>.</P> <P>Why?<BR /> Thanks</P> Thu, 16 Oct 2014 14:23:35 GMT https://community.splunk.com/t5/Security/Why-Deployment-Client-talks-to-Server-with-plain-HTTP-instead-of/m-p/165254#M4908 JakeConcur 2014-10-16T14:23:35Z Re: Why Deployment Client talks to Server with plain HTTP instead of HTTPS? https://community.splunk.com/t5/Security/Why-Deployment-Client-talks-to-Server-with-plain-HTTP-instead-of/m-p/165255#M4909 <P>It happened, because password for the key has been invalidated:</P> <PRE><CODE>Can't read key file /opt/splunkforwarder/etc/auth/server.pem errno=151429224 error:0906A068:PEM routines:PEM_do_header:bad password read. Couldn't initialize SSL Context for HTTPClient in ServerConfig Can't read key file /opt/splunkforwarder/etc/auth/server.pem errno=151404653 error:0906406D:PEM routines:PEM_def_callback:problems getting password. SSL context could not be created - error in cert or password is wrong SSL will not be enabled </CODE></PRE> Tue, 21 Oct 2014 08:52:55 GMT https://community.splunk.com/t5/Security/Why-Deployment-Client-talks-to-Server-with-plain-HTTP-instead-of/m-p/165255#M4909 JakeConcur 2014-10-21T08:52:55Z