Parameters must be in the form '-parameter value' error when trying to sign certificate.

[CaptainHook]

Does anyone have an idea on why I am returning the following error:
Parameters must be in the form '-parameter value'

When trying to run the below command
$SPLUNK_HOME/bin/splunk cmd openssl x509 -req -in myCACertificate.csr -sha512
-signkey myCAPrivateKey.key -CAcreateserial -out myCACertificate.pem -days 1095

Reference: http://docs.splunk.com/Documentation/Splunk/7.0.2/Security/Howtoself-signcertificates

Thank you.

[sloshburch]

I'm guessing the docs could have a typo on the parameter. I would suggest doing a divide and conquer. Chop off half the params and see if the same syntax message comes up. If yes, then cut in half again. If no, then use the other half. Repeat until you identify which parameter is causing the problem. Then we can pinpoint if the docs are wrong or if we made a typo in the cmd.

[deepashri_123]

Hey CaptainHook,

Make sure the splunk home path entered is correct and try running the command:

$SPLUNK_HOME/bin/splunk cmd openssl x509 -req -in
myServerCertificate.csr -SHA512 -CA myCACertificate.pem -CAkey myCAPrivateKey.key
-CAcreateserial -out myServerCertificate.pem -days 1095

In your above command the certificate is missing

[somesoni2]

Try to type in the command instead of copying from Splunk documentation page (or anywhere else you're copying from).

[CaptainHook]

Thanks somesoni2, Yeah, I thought of that too and it still didn't work manually typing it in.

[elliotproebstel]

Is that a direct copy/paste from where you're trying to run it? Any chance any of those values actually contain spaces? Spitballing here.

[CaptainHook]

Hello Elliotproebstel and thank you for your response. I did actually type in the command and NOT copy/paste it. I had tried it both ways prior to posting the question.

[elliotproebstel]

Sorry, I know you said above that you'd typed it directly into your command line. I was trying to ask if you had copied directly from the command line into your post, since there was nothing I could see that was askew. Sometimes people transcribe and, in the process of transcribing, accidentally obfuscate what was going wrong.

[CaptainHook]

I misunderstood your response, sorry about that. Yes, I did copy the command from the CL to this post.

[CaptainHook]

Does anybody have any other ideas or thoughts? Thanks in Advance.