https://community.splunk.com/t5/Getting-Data-In/Splunk-SSL-Question/m-p/261104#M50089 <P>Splunk doesn't use a trust store (java style), but you can instruct Splunk where to find a rootCA from a 3rd party.</P> <P>outputs.conf:<BR /> sslRootCAPath = </P> Sun, 27 Mar 2016 03:08:41 GMT davidpaper 2016-03-27T03:08:41Z https://community.splunk.com/t5/Getting-Data-In/Splunk-SSL-Question/m-p/261103#M50088 <P>So I have a Splunk environment signed by a 3rd party CA. However, the forwarders are using self-signed certificates because it's in a testing environment. WHen I try to send data from forwarder to indexer, I'm getting errors saying it can't verify certificate. I'm guessing it's because it is signed by a different root CA and the 3rd party won't accept it. </P> <P>Is there any way to add the self signed root CA to a trust store or anything? Or do they have to be all signed by the same 3rd party CA?</P> Thu, 24 Mar 2016 14:04:49 GMT https://community.splunk.com/t5/Getting-Data-In/Splunk-SSL-Question/m-p/261103#M50088 chadwagonerKGI 2016-03-24T14:04:49Z https://community.splunk.com/t5/Getting-Data-In/Splunk-SSL-Question/m-p/261104#M50089 <P>Splunk doesn't use a trust store (java style), but you can instruct Splunk where to find a rootCA from a 3rd party.</P> <P>outputs.conf:<BR /> sslRootCAPath = </P> Sun, 27 Mar 2016 03:08:41 GMT https://community.splunk.com/t5/Getting-Data-In/Splunk-SSL-Question/m-p/261104#M50089 davidpaper 2016-03-27T03:08:41Z