https://community.splunk.com/t5/Security/SSL-expired-now-what/m-p/187343#M5533 <P>You can generate new certs using the scripts in the $SPLUNK_HOME/bin/ directory.</P> Wed, 04 Jun 2014 05:30:32 GMT gkanapathy 2014-06-04T05:30:32Z https://community.splunk.com/t5/Security/SSL-expired-now-what/m-p/187341#M5531 <P>I have an indexer and forwarder. They have been configured with self sign cert ssl. Lets say the server cert has expired, okay now you just create another cert. </P> <P>What do you do when the root cert has expired, what will happen? Do you have to configure a new set of certs?</P> <P>The default certs expire 3 years, so does the rootCA and server certs also expire in 3 years? </P> <P>Is the root cert suppose to expire at a different time than the server cert?</P> Wed, 04 Jun 2014 01:00:54 GMT https://community.splunk.com/t5/Security/SSL-expired-now-what/m-p/187341#M5531 ben_leung 2014-06-04T01:00:54Z https://community.splunk.com/t5/Security/SSL-expired-now-what/m-p/187342#M5532 <P>Yes, when the root cert has expired, you will need a new cert chain. I believe that root CAs can't issue certificates beyond their own validity. The root cert can last longer than the child certs.</P> Wed, 04 Jun 2014 05:29:42 GMT https://community.splunk.com/t5/Security/SSL-expired-now-what/m-p/187342#M5532 gkanapathy 2014-06-04T05:29:42Z https://community.splunk.com/t5/Security/SSL-expired-now-what/m-p/187343#M5533 <P>You can generate new certs using the scripts in the $SPLUNK_HOME/bin/ directory.</P> Wed, 04 Jun 2014 05:30:32 GMT https://community.splunk.com/t5/Security/SSL-expired-now-what/m-p/187343#M5533 gkanapathy 2014-06-04T05:30:32Z