Developing for Splunk Enterprise

Unable to generate Self-sign certificates for Splunk Web

rajkumarv
Engager

Hi,

I am unable to generate Self-sign certificates for Splunk Web in Splunk Search Head using the path E:\Program Files\Splunk\etc\auth\mycerts. However, same is working if I give without the path i.e. $SPLUNK_HOME\bin\splunk cmd openssl genrsa -des3 -out myCAPrivateKey.key 2048. Any idea?

When i execute the commands for generating the self sign using the path i am getting below message
E:\Program Files\Splunk\bin>splunk cmd openssl genrsa -des3 -out E:\Program Files\Splunk\etc\auth\myCAPrivateKey.key 2048
usage: genrsa [args] [numbits]
-des encrypt the generated key with DES in cbc mode
-des3 encrypt the generated key with DES in ede cbc mode (168 bit key)
-seed
encrypt PEM output with cbc seed
-aes128, -aes192, -aes256
encrypt PEM output with cbc aes
-camellia128, -camellia192, -camellia256
encrypt PEM output with cbc camellia
-out file output the key to 'file
-passout arg output file pass phrase source
-f4 use F4 (0x10001) for the E value
-3 use 3 for the E value
-engine e use engine e, possibly a hardware device.
-rand file;file;...
load the file (or the files in the directory) into
the random number generator

Tags (1)
0 Karma

dkeck
Influencer

Hi

Certificate for splunk web has to be created with a key that is not password protected, maybe thats the problem

Remove the password from your key.
(Splunk Web does not support
password-protected private keys.

https://docs.splunk.com/Documentation/Splunk/7.2.3/Security/Self-signcertificatesforSplunkWeb

0 Karma

rajkumarv
Engager

Hi,
Thanks for the update. It's working now..

0 Karma

dkeck
Influencer

Was it the password?

0 Karma

dkeck
Influencer

Where you able to solve your problem?

if it helped please accept the question 🙂

0 Karma

nikita_p
Contributor
0 Karma

p_gurav
Champion

Try putting path in "".

0 Karma
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!