Why am I getting "Splunk certificate expired - ssl3_read_bytes:sslv3 alert" errors on my server?

[rsingh]

new to splunk and getting these errors on my server. if i look at any of my server it has a cert.pem

Splunk server is installed on a Linux. what do i need to do to generate a new splunk

[Raghav2384 · Accepted solution]

Hi @rsingh,

There was a communication rom splunk asking folks to upgrade splunk or renew default certs that ship with Splunk before July 17,2016. Off course that was only for Enterprise splunk customers with a valid license.

If you have a Enterprise splunk instance with valid license, contact splunk and they should help you out with a renewal script or provide you instructions to solve the situation you are in

OR

upgrade splunk instance to 6.3.3 or above as they ship with extended default certs.

Hope this helps!

Thanks,
Raghav