All Apps and Add-ons

Add-on Builder API inputs

dsofoulis
Path Finder

Hi Everyone,

I am using the Splunk Add-on builder and trying to create an API input.
The url is a website using TLS. The string which I'm works when put into a browser, but when clicking test I get the following error:

HTTPError: HTTP Error [SSL: TLSV1_ALERT_INTERNAL_ERROR] tlsv1 alert internal error (_ssl.c:676)

Not sure how to fix this.

0 Karma

chli_splunk
Splunk Employee
Splunk Employee

This is a bug of AoB built-in package httplib2. Please upgrade it to latest version(https://pypi.python.org/pypi/httplib2/0.10.3) in following path:

/etc/apps/splunk_app_addon-builder/bin/splunk_app_add_on_builder/httplib2

/etc/apps/splunk_app_addon-builder/bin/ta_generator/resources_lib/httplib2

/etc/apps/{your TA}/bin/ta_tt/httplib2

waechtler
Path Finder

this solution did help me for AoB v 2.2 with a similar error:
HTTPError reason=HTTP Error [SSL: SSLV3_ALERT_HANDSHAKE_FAILURE] sslv3 alert handshake failure (_ssl.c:676)

0 Karma

asieira
Path Finder

I found a reference to a similar problem here and the root cause was a bug in OpenSSL: https://github.com/neo4j/neo4j/issues/9233

What version of Splunk are you running? Is the operating system fully patched, in particular the SSL libraries?

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...