topic Re: WARNING: Server Certificate Hostname Validation is disabled. Please see server.conf/[sslConfig]/cliVerifyServerName in Splunk Enterprise

WARNING: Server Certificate Hostname Validation is disabled. Please see server.conf/[sslConfig]/cliVerifyServerName for

AvinashShivhare — Thu, 23 Feb 2023 09:01:51 GMT

I am building search head cluster. But when i am initiating clustering i am getting below error. I am using below syntax for cluster initiation. Please note I have checked my server.conf file in local directory and added entry as false for cliVerifyServerName and sslVerifyServerName.

Also in web.conf enableSplunkWebSSL = false is already there .

./splunk init shcluster-config -auth <username>:<password> -mgmt_uri <uri>:<managementport> -replication_port <replication port> -replication_factor <n> -conf_deploy_fetch_url <url>:<managementport> -secret <security_key> -shcluster_label <label>

WARNING: Server Certificate Hostname Validation is disabled. Please see server.conf/[sslConfig]/cliVerifyServerName for details.
Login failed

I am not looking to setup any third party or self singed certificate as this is just for self learning.

I would request your support.

Re: WARNING: Server Certificate Hostname Validation is disabled. Please see server.conf/[sslConfig]/cliVerifyServerName

richgalloway — Thu, 23 Feb 2023 17:23:46 GMT

That message is a warning, not an error. You can suppress it by setting cliVerifyServerName=true, but then you would need server names in your certificates.

Re: WARNING: Server Certificate Hostname Validation is disabled. Please see server.conf/[sslConfig]/cliVerifyServerName

arfee_splunker — Wed, 01 Mar 2023 07:13:43 GMT

Hi @richgalloway

Which file and stanza name is the edit required in ?

Re: WARNING: Server Certificate Hostname Validation is disabled. Please see server.conf/[sslConfig]/cliVerifyServerName

SplunkingKnight — Wed, 01 Mar 2023 12:18:11 GMT

Hi @arfee_splunker,

in the server.conf and the stanza [sslConfig], as shown in the warn message.

Best regards

Re: WARNING: Server Certificate Hostname Validation is disabled. Please see server.conf/[sslConfig]/cliVerifyServerName

adnanhakiim — Sun, 16 Apr 2023 11:45:41 GMT

how to give a name in our certificates?

Re: WARNING: Server Certificate Hostname Validation is disabled. Please see server.conf/[sslConfig]/cliVerifyServerName

richgalloway — Sun, 16 Apr 2023 13:35:51 GMT

See the instructions at https://docs.splunk.com/Documentation/Splunk/9.0.4/Security/Getthird-partycertificatesforSplunkWeb#:~:text=Name%20(eg%2C%20section)-,Common,-Name%20(e.g