https://community.splunk.com/t5/Getting-Data-In/How-to-configure-Splunk-DB-Connect-1-to-support-TLS-encryption/m-p/226159#M98950 <P>Assuming you're using Oracle's JRE/JDK 7, you will find that TLSv1.2 support is not enabled by default.<BR /> To add TLS functionality, simply add any combination of this flag into the JVM command line options on the DBX setup page:<BR /> -Dhttps.protocols=TLSv1,TLSv1.1,TLSv1.2</P> Thu, 12 Nov 2015 16:41:47 GMT lagnone_splunk 2015-11-12T16:41:47Z https://community.splunk.com/t5/Getting-Data-In/How-to-configure-Splunk-DB-Connect-1-to-support-TLS-encryption/m-p/226158#M98949 <P>I am using DBX v1, and would like to take advantage of splunkd using TLS 1.2 (this is in [sslconfig] for server.conf):</P> <PRE><CODE>## ./etc/system/local/server.conf: [sslconfig] sslVersions = tls1.2 </CODE></PRE> <P>But when I do, the jbridge won't start; this is what I found in the jbridge.log:</P> <PRE><CODE>2015-11-12 10:25:22,786 ERROR Java process returned error code 1! Error: Initializing Splunk context... Environment: SplunkEnvironment{SPLUNK_HOME=/opt/splunk,SPLUNK_DB=/opt/splunk/var/lib/splunk} Configuring Log4j... Exception in thread "main" com.splunk.config.SplunkConfigurationException: IO Error while reading configuration from Splunkd: javax.net.ssl.SSLException: Received fatal alert: protocol_version at com.splunk.config.rest.RESTAdapter.request(RESTAdapter.java:199) at com.splunk.config.rest.RESTAdapter.readConfig(RESTAdapter.java:207) at com.splunk.config.cache.CachedConfigurationAdapter.readConfig(CachedConfigurationAdapter.java:32) at com.splunk.config.cache.CachedConfigurationAdapter.readStanza(CachedConfigurationAdapter.java:40) at com.splunk.env.SplunkContext.getConfigStanza(SplunkContext.java:313) at com.splunk.env.SplunkContext.initialize(SplunkContext.java:128) at com.splunk.bridge.JavaBridgeServer.main(JavaBridgeServer.java:34) Caused by: javax.net.ssl.SSLException: Received fatal alert: protocol_version at sun.security.ssl.Alerts.getSSLException(Alerts.java:208) at sun.security.ssl.Alerts.getSSLException(Alerts.java:154) at sun.security.ssl.SSLSocketImpl.recvAlert(SSLSocketImpl.java:1979) at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1086) at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1332) at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1359) at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1343) at sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:563) at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:185) at sun.net.www.protocol.https.HttpsURLConnectionImpl.connect(HttpsURLConnectionImpl.java:153) at com.splunk.rest.Splunkd.request(Splunkd.java:216) at com.splunk.rest.Splunkd.request(Splunkd.java:102) at com.splunk.config.rest.RESTAdapter.request(RESTAdapter.java:197) ... 6 more 2015-11-12 10:25:22,787 ERROR Command output: None </CODE></PRE> Thu, 12 Nov 2015 16:38:46 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-configure-Splunk-DB-Connect-1-to-support-TLS-encryption/m-p/226158#M98949 splunkIT 2015-11-12T16:38:46Z https://community.splunk.com/t5/Getting-Data-In/How-to-configure-Splunk-DB-Connect-1-to-support-TLS-encryption/m-p/226159#M98950 <P>Assuming you're using Oracle's JRE/JDK 7, you will find that TLSv1.2 support is not enabled by default.<BR /> To add TLS functionality, simply add any combination of this flag into the JVM command line options on the DBX setup page:<BR /> -Dhttps.protocols=TLSv1,TLSv1.1,TLSv1.2</P> Thu, 12 Nov 2015 16:41:47 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-configure-Splunk-DB-Connect-1-to-support-TLS-encryption/m-p/226159#M98950 lagnone_splunk 2015-11-12T16:41:47Z https://community.splunk.com/t5/Getting-Data-In/How-to-configure-Splunk-DB-Connect-1-to-support-TLS-encryption/m-p/226160#M98951 <P>Thanks @Lagnone. That worked for me. I am on java 7. Curious to know if these params are needed for java 8 as well.</P> Thu, 12 Nov 2015 16:46:59 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-configure-Splunk-DB-Connect-1-to-support-TLS-encryption/m-p/226160#M98951 splunkIT 2015-11-12T16:46:59Z https://community.splunk.com/t5/Getting-Data-In/How-to-configure-Splunk-DB-Connect-1-to-support-TLS-encryption/m-p/226161#M98952 <P>You should not need these on Java 8</P> Thu, 12 Nov 2015 18:24:51 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-configure-Splunk-DB-Connect-1-to-support-TLS-encryption/m-p/226161#M98952 lagnone_splunk 2015-11-12T18:24:51Z https://community.splunk.com/t5/Getting-Data-In/How-to-configure-Splunk-DB-Connect-1-to-support-TLS-encryption/m-p/226162#M98953 <P>We had the same issue with Oracle Java 1.8.0_66.<BR /> But the Solution worked here too.</P> Mon, 11 Jan 2016 15:08:25 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-configure-Splunk-DB-Connect-1-to-support-TLS-encryption/m-p/226162#M98953 peter_krammer 2016-01-11T15:08:25Z