topic Re: installing a SSL certificate in Splunk in Security

installing a SSL certificate in Splunk

vikram_m — Wed, 01 Mar 2017 10:48:45 GMT

Hi Team I have a SSL certificate but it is in format of .cer extension

going through Splunk docs I can see pem format files installation. Also on the splunk server I can find only myServerPrivateKey.key key.

Please let me know if I am missing to be found anything here.

Thanks.
Vikram.

Re: installing a SSL certificate in Splunk

jkat54 — Wed, 01 Mar 2017 11:05:58 GMT

Often times people/companies name certs with whatever file extension they understand as a cert.

Many times you'll find the same data in a pem that's in a cer etc.

You originally tagged this as being related to the Web SSL app, which is an app that helps you with web SSL but is a different topic altogether. I'm mentioning that because that tells me and others that you're looking to install an ssl certificate for Splunk web.

So let me explain what a pem typically is. A pem is supposed to be the root certificate authority cert plus intermediary certs plus your public key plus your signed certificate. So it's the "full chain" of your cert.

Usually I create one like this:

 cat rootca.cer intermediate.cer mypublickey.key mycert.cer > mydomain.com.pem

So you'll need those other certs and you simply append them all together in one file with pem extension.

In web.conf add this:
[settings]
enableSplunkWebSSL = true
serverCert = /path/to/your/pem

You may also find the web SSL installer app useful: https://splunkbase.splunk.com/app/3231/

Re: installing a SSL certificate in Splunk

starcher — Thu, 02 Mar 2017 00:42:48 GMT

Also see slides and talk from April 2016
https://wiki.splunk.com/Virtual_.conf

Re: installing a SSL certificate in Splunk

jkat54 — Mon, 13 Aug 2018 11:55:38 GMT

@vikram_m did this help? Can you accept the answer if so?