I am trying to enable Splunk forwarder via SSL, I received the message:
02-06-2015 10:10:45.415 -0700 ERROR TcpOutputFd - Connection to host=176.23.34.15:9997 failed. sock_error = 0. SSL Error = error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
02-06-2015 10:11:15.312 -0700 ERROR TcpOutputFd - Connection to host=176.23.34.15:9997 failed. sock_error = 0. SSL Error = error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
Why is that?
First confirm that Splunk recognises the certificate shipped by default
Then you can try with this simple python script and verify if the connection is getting refused:
=====================
import httplib2
for i in range(1,500):
print i
response, content = httplib2.Http(disable_ssl_certificate_validation=True).request('https://127.0.0.1:8089',)
print response,content
First confirm that Splunk recognises the certificate shipped by default
Then you can try with this simple python script and verify if the connection is getting refused:
=====================
import httplib2
for i in range(1,500):
print i
response, content = httplib2.Http(disable_ssl_certificate_validation=True).request('https://127.0.0.1:8089',)
print response,content