topic Re: web.conf not working for dhfile in 2048 encryption in Getting Data In

web.conf not working for dhfile in 2048 encryption

tlam_splunk — Fri, 28 Apr 2017 09:53:05 GMT

Setup the web.conf using dhFile at 2048 encryption

web.conf
dhFile = $SPLUNK_HOME\etc\auth\splunkweb\DH2048.pem

Here is the command to generate the key

openssl.exe gendh -out "c:\program files\splunk\etc\auth\splunkweb\DH_2048.pem" 2048

After set it up, splunk web will not start without any error in the log file.

Re: web.conf not working for dhfile in 2048 encryption

tlam_splunk — Fri, 28 Apr 2017 09:53:36 GMT

Have to add the double quote for the parameter value in dhFile

dhFile = "$SPLUNK_HOME\etc\auth\splunkweb\DH2048.pem"

Re: web.conf not working for dhfile in 2048 encryption

jcrabb_splunk — Wed, 28 Jun 2017 16:11:00 GMT

Just an additional comment, if one wishes to utilize the dhFile setting in server.conf, on a windows host, Splunk may not start unless there are quotes (" ") around the setting. I added that to another post as well:

https://answers.splunk.com/answers/525172/why-am-i-unable-to-use-dhfile-and-2048-encryption.html?childToView=550177#answer-550177

Re: web.conf not working for dhfile in 2048 encryption

DimasSouza — Fri, 29 Sep 2017 12:04:21 GMT

Maybe it could be inserted as known issue or a bug?