topic Re: What protocol is used for the SSL connection between the Splunk forwarder and index? in Getting Data In https://community.splunk.com/t5/Getting-Data-In/What-protocol-is-used-for-the-SSL-connection-between-the-Splunk/m-p/237039#M46050 <P>Thankyou very much. That is great information!</P> Thu, 12 Jan 2017 16:55:28 GMT Meterman 2017-01-12T16:55:28Z What protocol is used for the SSL connection between the Splunk forwarder and index? https://community.splunk.com/t5/Getting-Data-In/What-protocol-is-used-for-the-SSL-connection-between-the-Splunk/m-p/237036#M46047 <P>I would like to know what protocols / ciphers are used for the ssl connection. Is it SSLv3, TLS1.0, TLS1.1 or TLS1.2?<BR /> Is that determined by the OS or Splunk?</P> Thu, 12 Jan 2017 15:36:50 GMT https://community.splunk.com/t5/Getting-Data-In/What-protocol-is-used-for-the-SSL-connection-between-the-Splunk/m-p/237036#M46047 Meterman 2017-01-12T15:36:50Z Re: What protocol is used for the SSL connection between the Splunk forwarder and index? https://community.splunk.com/t5/Getting-Data-In/What-protocol-is-used-for-the-SSL-connection-between-the-Splunk/m-p/237037#M46048 <P>Hi Meterman, </P> <P>The default SSL version is tls1.2, but these versions are all supported: "ssl3", "tls1.0", "tls1.1", and "tls1.2". </P> <P>You can specify the SSL version in authentication.conf and server.conf</P> <P>authentication.conf</P> <PRE><CODE>sslVersions = &lt;versions_list&gt; * OPTIONAL * Comma-separated list of SSL versions to support. * The versions available are "ssl3", "tls1.0", "tls1.1", and "tls1.2" * If not set, defaults to the setting in server.conf. </CODE></PRE> <P>server.conf</P> <PRE><CODE>sslVersions = &lt;versions_list&gt; * OPTIONAL * Comma-separated list of SSL versions to support. * The versions available are "ssl3", "tls1.0", "tls1.1", and "tls1.2" * If not set, defaults to the setting in server.conf. </CODE></PRE> <P>Hope this helps. Thanks!<BR /> Hunter</P> Thu, 12 Jan 2017 16:52:59 GMT https://community.splunk.com/t5/Getting-Data-In/What-protocol-is-used-for-the-SSL-connection-between-the-Splunk/m-p/237037#M46048 hunters_splunk 2017-01-12T16:52:59Z Re: What protocol is used for the SSL connection between the Splunk forwarder and index? https://community.splunk.com/t5/Getting-Data-In/What-protocol-is-used-for-the-SSL-connection-between-the-Splunk/m-p/237038#M46049 <P>server.conf<BR /> sslVersions = <VERSIONS_LIST><BR /> * Comma-separated list of SSL versions to connect to 'url' (<A href="https://apps.splunk.com">https://apps.splunk.com</A>).<BR /> * The versions available are "ssl3", "tls1.0", "tls1.1", and "tls1.2".<BR /> * The special version "*" selects all supported versions. The version "tls"<BR /> selects all versions tls1.0 or newer.<BR /> * If a version is prefixed with "-" it is removed from the list.<BR /> * SSLv2 is always disabled; "-ssl2" is accepted in the version list but does nothing.<BR /> * When configured in FIPS mode, ssl3 is always disabled regardless<BR /> of this configuration.<BR /> * Defaults to "tls1.2".</VERSIONS_LIST></P> Thu, 12 Jan 2017 16:54:25 GMT https://community.splunk.com/t5/Getting-Data-In/What-protocol-is-used-for-the-SSL-connection-between-the-Splunk/m-p/237038#M46049 hunters_splunk 2017-01-12T16:54:25Z Re: What protocol is used for the SSL connection between the Splunk forwarder and index? https://community.splunk.com/t5/Getting-Data-In/What-protocol-is-used-for-the-SSL-connection-between-the-Splunk/m-p/237039#M46050 <P>Thankyou very much. That is great information!</P> Thu, 12 Jan 2017 16:55:28 GMT https://community.splunk.com/t5/Getting-Data-In/What-protocol-is-used-for-the-SSL-connection-between-the-Splunk/m-p/237039#M46050 Meterman 2017-01-12T16:55:28Z