topic Re: Self Signed Certificates in splunk in Installation

Self Signed Certificates in splunk

rohitvjoshi — Thu, 14 Feb 2019 05:14:03 GMT

Hi Team ,

I am able to see few certificate under /opt/splunk/etc/auth , Can some one tell me how to check the certificate expiry date.

MoniM — Thu, 14 Feb 2019 05:43:56 GMT

Hi @rohitvjoshi ,
you can use this command to view your certificate expiry date:-

$ openssl x509 -noout -enddate -in $SPLUNK_HOME/etc/auth/server.pem

Hope it helps!!
Thanks

rohitvjoshi — Thu, 14 Feb 2019 06:04:20 GMT

I have to run this on bin right?

MoniM — Thu, 14 Feb 2019 06:21:06 GMT

No, not in bin. Run it directly in your root directory.
For example:-

[root@localhost ~]# pwd
/root
[root@localhost ~]# openssl x509 -noout -enddate -in /opt/splunk/etc/auth/server.pem
notAfter=Jan 10 06:40:29 2022 GMT

rohitvjoshi — Thu, 14 Feb 2019 08:21:48 GMT

it worked thanks

jkat54 — Tue, 04 Jun 2019 16:11:42 GMT

Splunk does ship with openssl binary in $splunkhome/bin

This is true for the UF and full installs. So if openssl isn't installed on the server, you can try using the one that ships with splunk.