KVstore SSL error

Haleb — Wed, 19 Mar 2025 15:32:41 GMT

Hello there. After updating from 9.3.1 to 9.4.1 my KVstore stoped working. During quick investigation I found the following errors:

2025-03-19T14:35:15.556Z I NETWORK [listener] connection accepted from 127.0.0.1:41888 #1188 (1 connection now open) 2025-03-19T14:35:15.566Z E NETWORK [conn1188] SSL peer certificate validation failed: unable to get issuer certificate 2025-03-19T14:35:15.566Z I NETWORK [conn1188] Error receiving request from client: SSLHandshakeFailed: SSL peer certificate validation failed: unable to get issuer certificate. Ending connection from 127.0.0.1:41888 (connection id: 1188)

openssl s_client -connect 127.0.0.1:8191 -showcerts
gives me valid certificate info. Any idea why I receive this errors? Thx

Re: KVstore SSL error

kiran_panchavat — Fri, 21 Mar 2025 12:21:34 GMT

@Haleb

Hey, take a look at this documentation, I think it covers the same issue you’re running into

: Solved: KV Store Failing to start 9.4 .1 - Splunk Community

Re: KVstore SSL error

Haleb — Thu, 17 Apr 2025 12:05:49 GMT

I think the easiest way is to use default certificates for KV store.

topic Re: KVstore SSL error in Splunk Enterprise

KVstore SSL error

Re: KVstore SSL error

Re: KVstore SSL error