https://community.splunk.com/t5/Getting-Data-In/Support-for-multiple-CA-for-universal-forwarder-to-heavy/m-p/69436#M14077 <P>Bump. The problem here is that even though you can define several <CODE>[splunktcp-ssl]</CODE> stanzas, you can only define one <CODE>[SSL]</CODE> stanza, apparently. I also want to define two <CODE>[SSL]</CODE> stanzas, for two different server certificates. Also, one of them would require client certificate, and the other would not. Is this possible?</P> <P>EDIT: Got an answer to my own question here <A href="https://answers.splunk.com/answers/549719/two-ssl-certificates-on-a-single-indexer-forwarder.html">https://answers.splunk.com/answers/549719/two-ssl-certificates-on-a-single-indexer-forwarder.html</A></P> Thu, 12 Mar 2020 11:39:49 GMT hettervik 2020-03-12T11:39:49Z https://community.splunk.com/t5/Getting-Data-In/Support-for-multiple-CA-for-universal-forwarder-to-heavy/m-p/69434#M14075 <P>We are working with mutiple platforms that will send log data to heavy forwarders. We want to encrypt and if possible also authenticate the connetions. For one platform we have our own CA for the server certificates, the authenticated connections work, for the second platform we want to use the splunk certificates. I didn't see how we can configure the heavy forwarder with two different CAs. Is this even possible? How would I build this?</P> Fri, 02 Sep 2011 12:01:20 GMT https://community.splunk.com/t5/Getting-Data-In/Support-for-multiple-CA-for-universal-forwarder-to-heavy/m-p/69434#M14075 thscheidegger 2011-09-02T12:01:20Z https://community.splunk.com/t5/Getting-Data-In/Support-for-multiple-CA-for-universal-forwarder-to-heavy/m-p/69435#M14076 <P>You would define two different stanzas in inputs.conf on the heavyfwd boxes. Use port xxxx for CA1-signed clients and port yyyy for CA2-signed clients.</P> Thu, 29 Dec 2011 15:31:33 GMT https://community.splunk.com/t5/Getting-Data-In/Support-for-multiple-CA-for-universal-forwarder-to-heavy/m-p/69435#M14076 kenson 2011-12-29T15:31:33Z https://community.splunk.com/t5/Getting-Data-In/Support-for-multiple-CA-for-universal-forwarder-to-heavy/m-p/69436#M14077 <P>Bump. The problem here is that even though you can define several <CODE>[splunktcp-ssl]</CODE> stanzas, you can only define one <CODE>[SSL]</CODE> stanza, apparently. I also want to define two <CODE>[SSL]</CODE> stanzas, for two different server certificates. Also, one of them would require client certificate, and the other would not. Is this possible?</P> <P>EDIT: Got an answer to my own question here <A href="https://answers.splunk.com/answers/549719/two-ssl-certificates-on-a-single-indexer-forwarder.html">https://answers.splunk.com/answers/549719/two-ssl-certificates-on-a-single-indexer-forwarder.html</A></P> Thu, 12 Mar 2020 11:39:49 GMT https://community.splunk.com/t5/Getting-Data-In/Support-for-multiple-CA-for-universal-forwarder-to-heavy/m-p/69436#M14077 hettervik 2020-03-12T11:39:49Z