topic Re: SSL Error Splunk DB connect add-on in Getting Data In

SSL Error Splunk DB connect add-on

kiranpanchavat1 — Mon, 25 Oct 2021 10:24:52 GMT

Hello SPLUNKERS,

We are seeing this error while integrating the SQL DB using DB connect add-on . Kindly let me know what the error is.

Version :

It is Sql Server 2014 EE

The driver could not establish a secure connection to SQL Server by using Secure Sockets Layer (SSL) encryption. Error: "Certificates do not conform to algorithm constraints". ClientConnectionId:xxxxxxxxxxxxxxx

Re: SSL Error Splunk DB connect add-on

venkatasri — Mon, 25 Oct 2021 11:55:02 GMT

Hi @kiranpanchavat1

DB Connect underlying uses the JDBC driver's, looking at your SQL server version it could be compatible with old TLS/SSL v1 ciphers which might not be compatible with latest DB Connect driver/ Java version.

This is more likely a driver compatibility issue rather than Splunk core issue. Investigate Java + SQL server forums might help with clues to fix it.

SQL Server JDBC Error on Java 8: The driver could not establish a secure connection to SQL Server by using Secure Sockets Layer (SSL) encryption - Stack Overflow

---

An upvote would be appreciated if this reply helps!

Re: SSL Error Splunk DB connect add-on

kiranpanchavat1 — Mon, 25 Oct 2021 12:09:35 GMT

@venkatasri

Thanks for the update.

Re: SSL Error Splunk DB connect add-on

venkatasri — Wed, 27 Oct 2021 06:53:04 GMT

@kiranpanchavat1 if you resolved it post solution that would help other users.

Re: SSL Error Splunk DB connect add-on

kiranpanchavat1 — Sun, 31 Oct 2021 07:09:11 GMT

@venkatasri

output from my heavy forwarder,

# openssl s_client -connect x.x.x.x:8089 -showcerts

New, TLSv1.2, Cipher is xxxxxxxxxxxxxxxxxxx

Server public key is 2048 bit

Secure Renegotiation IS supported

Compression: NONE

Expansion: NONE

No ALPN negotiated

SSL-Session:

Protocol : TLSv1.2

Re: SSL Error Splunk DB connect add-on

kiranpanchavat1 — Mon, 08 Nov 2021 08:30:37 GMT

@venkatasri

Any update on the below.

FYI : SQL team is not using any SSL on server level .

The driver could not establish a secure connection to SQL Server by using Secure Sockets Layer (SSL) encryption. Error: "Certificates do not conform to algorithm constraints". ClientConnectionId:31a96919-d92e-4a61-9cff-c5667d4b4976

Do i need to change any connection type because i used MS-SQL SERVER USING MS GENERIC DRIVER AND MYSQL AND MS-SQL SERVER USING MS GENERIC DRIVER WITH KERBEROS AUTHENTICATION

Re: SSL Error Splunk DB connect add-on

venkatasri — Tue, 09 Nov 2021 02:40:08 GMT

@kiranpanchavat1 Haven't worked with SQL Server though this is purely driver compatibility/ SSL compability issues between driver / SQL Server. did you check other forums specific to this JDBC issue?

https://social.technet.microsoft.com/Forums/en-US/07ca9eec-a092-436e-b960-3fe15bc36389/unable-to-open-connection-to-sql-server?forum=sqlsecurity

Lower the TLS version and try and read the SQL Server version docs to find the suitable driver. You might need to replace the driver of DB-Connect if the latest version of JDBC driver do not support old SQL server version.

an upvote would be appreciated if this reply helps !