Deployment Architecture

SSL to License Master?

mikelongley
Observer

Hi,

We run a distributed architecture in which we have organisations connecting in to our license master, and one organisation has been having trouble connecting. We checked the usual network troubleshooting and it seems fine, and I eventually found a line in the splunkd log suggesting an SSL error:

"WARN HttpListener - Socket error from X.X.X.X:Y while idling: error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol"

 

So I didn't think license management traffic actually had an SSL option in the first place, and can't see any reference to it in Splunk's SSL documentation. Has anyone seen any similar errors or have any idea how it might be resolved?

 

Thanks,

Mike

0 Karma

jcaceres
Explorer

unknown protocol indicates that the connecting client is sending a SSL request that the Splunk server doesn't understand.

Check your output of 

splunk btool server list --debug sslConfig

and reference the Splunk docs @isoutamo  provided for supported SSL protocols.

0 Karma

isoutamo
SplunkTrust
SplunkTrust
0 Karma
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!