Getting Data In

How to Best Test if my SSL Certificate is valid

mzorzi
Splunk Employee
Splunk Employee

I am trying to enable Splunk forwarder via SSL, I received the message:

02-06-2015 10:10:45.415 -0700 ERROR TcpOutputFd - Connection to host=176.23.34.15:9997 failed. sock_error = 0. SSL Error = error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
02-06-2015 10:11:15.312 -0700 ERROR TcpOutputFd - Connection to host=176.23.34.15:9997 failed. sock_error = 0. SSL Error = error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed 

Why is that?

1 Solution

mzorzi
Splunk Employee
Splunk Employee

First confirm that Splunk recognises the certificate shipped by default

Then you can try with this simple python script and verify if the connection is getting refused:

=====================

import httplib2

for i in range(1,500):
print i
response, content = httplib2.Http(disable_ssl_certificate_validation=True).request('https://127.0.0.1:8089',)
print response,content

View solution in original post

mzorzi
Splunk Employee
Splunk Employee

First confirm that Splunk recognises the certificate shipped by default

Then you can try with this simple python script and verify if the connection is getting refused:

=====================

import httplib2

for i in range(1,500):
print i
response, content = httplib2.Http(disable_ssl_certificate_validation=True).request('https://127.0.0.1:8089',)
print response,content
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...