Getting Data In

How to Best Test if my SSL Certificate is valid

mzorzi
Splunk Employee
Splunk Employee

I am trying to enable Splunk forwarder via SSL, I received the message:

02-06-2015 10:10:45.415 -0700 ERROR TcpOutputFd - Connection to host=176.23.34.15:9997 failed. sock_error = 0. SSL Error = error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
02-06-2015 10:11:15.312 -0700 ERROR TcpOutputFd - Connection to host=176.23.34.15:9997 failed. sock_error = 0. SSL Error = error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed 

Why is that?

1 Solution

mzorzi
Splunk Employee
Splunk Employee

First confirm that Splunk recognises the certificate shipped by default

Then you can try with this simple python script and verify if the connection is getting refused:

=====================

import httplib2

for i in range(1,500):
print i
response, content = httplib2.Http(disable_ssl_certificate_validation=True).request('https://127.0.0.1:8089',)
print response,content

View solution in original post

mzorzi
Splunk Employee
Splunk Employee

First confirm that Splunk recognises the certificate shipped by default

Then you can try with this simple python script and verify if the connection is getting refused:

=====================

import httplib2

for i in range(1,500):
print i
response, content = httplib2.Http(disable_ssl_certificate_validation=True).request('https://127.0.0.1:8089',)
print response,content
Get Updates on the Splunk Community!

Detecting Remote Code Executions With the Splunk Threat Research Team

WATCH NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If exploited, ...

Enter the Splunk Community Dashboard Challenge for Your Chance to Win!

The Splunk Community Dashboard Challenge is underway! This is your chance to showcase your skills in creating ...

.conf24 | Session Scheduler is Live!!

.conf24 is happening June 11 - 14 in Las Vegas, and we are thrilled to announce that the conference catalog ...