topic Re: Unable to generate Self-sign certificates for Splunk Web in Splunk Dev

Unable to generate Self-sign certificates for Splunk Web

rajkumarv — Thu, 17 Jan 2019 05:09:25 GMT

Hi,

I am unable to generate Self-sign certificates for Splunk Web in Splunk Search Head using the path E:\Program Files\Splunk\etc\auth\mycerts. However, same is working if I give without the path i.e. $SPLUNK_HOME\bin\splunk cmd openssl genrsa -des3 -out myCAPrivateKey.key 2048. Any idea?

When i execute the commands for generating the self sign using the path i am getting below message
E:\Program Files\Splunk\bin>splunk cmd openssl genrsa -des3 -out E:\Program Files\Splunk\etc\auth\myCAPrivateKey.key 2048
usage: genrsa [args] [numbits]
-des encrypt the generated key with DES in cbc mode
-des3 encrypt the generated key with DES in ede cbc mode (168 bit key)
-seed
encrypt PEM output with cbc seed
-aes128, -aes192, -aes256
encrypt PEM output with cbc aes
-camellia128, -camellia192, -camellia256
encrypt PEM output with cbc camellia
-out file output the key to 'file
-passout arg output file pass phrase source
-f4 use F4 (0x10001) for the E value
-3 use 3 for the E value
-engine e use engine e, possibly a hardware device.
-rand file;file;...
load the file (or the files in the directory) into
the random number generator

Re: Unable to generate Self-sign certificates for Splunk Web

p_gurav — Thu, 17 Jan 2019 09:47:14 GMT

Try putting path in "".

Re: Unable to generate Self-sign certificates for Splunk Web

nikita_p — Thu, 17 Jan 2019 13:14:15 GMT

Hi,
I hope you have followed the steps in below splunk documentation
https://docs.splunk.com/Documentation/Splunk/7.2.3/Security/Self-signcertificatesforSplunkWeb

Also you can check below links on splunk answers if it helps you.
https://answers.splunk.com/answers/490127/when-trying-to-create-a-self-sign-certificate-why.html

https://answers.splunk.com/answers/225486/generate-self-signed-certificate-windows-is-there-1.html

Re: Unable to generate Self-sign certificates for Splunk Web

dkeck — Thu, 17 Jan 2019 13:42:54 GMT

Certificate for splunk web has to be created with a key that is not password protected, maybe thats the problem

Remove the password from your key.
(Splunk Web does not support
password-protected private keys.

https://docs.splunk.com/Documentation/Splunk/7.2.3/Security/Self-signcertificatesforSplunkWeb

Re: Unable to generate Self-sign certificates for Splunk Web

dkeck — Fri, 18 Jan 2019 06:32:33 GMT

Where you able to solve your problem?

if it helped please accept the question 🙂

Re: Unable to generate Self-sign certificates for Splunk Web

rajkumarv — Mon, 21 Jan 2019 07:45:41 GMT

Hi,
Thanks for the update. It's working now..

Re: Unable to generate Self-sign certificates for Splunk Web

dkeck — Mon, 21 Jan 2019 10:51:49 GMT

Was it the password?