Getting Data In

Trying to upgrade our forwarder, why are we getting error "OpenSSL: error...handshake failure"?

sahils
New Member

Hello Team,

We tried to upgrade our Splunk Forwarder on Uslv-dapp-mon07 and mon08, but getting the error below for both Servers. Can you please help us?

Attached Screenshot.

0 Karma

woodcock
Esteemed Legend

You need these:

http://www.duanewaddle.com/quick-hit-disabling-sslv3-in-splunk/

Who: George Starcher and Duane Waddle, Defense Point Security
What: Avoid the SSLippery SSLope of Default SSL
Recording: https://splunk.webex.com/splunk/lsr.php?RCID=da90ccae281af46da9e4a3b46c076a0b
Slides: Media:SplunkTrustApril-SSLipperySlopeRevisited.pdf

And an older version here::
https://conf.splunk.com/session/2014/conf2014_DuaneWaddleGeorgeStarcher_Self_UsingTrack.pdf

ryanoconnor
Builder

What version of Splunk were you running and what are you running now?

You can disable sslv3 in web.conf. See the following page:

http://docs.splunk.com/Documentation/Splunk/6.4.1/Security/SetyourSSLversion

Another page you'll want to review is the following

http://www.splunk.com/view/SP-CAAANKE

0 Karma

renjith_nair
Legend

Looks like your screen shot was not uploaded;just paste the errors

---
What goes around comes around. If it helps, hit it with Karma 🙂
0 Karma

sahils
New Member

It shows below error

OpenSSL: error :14077410:SSL routines:SSL23_GET_SERVER_Hello:sslv3:alert handshake failure

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In January, the Splunk Threat Research Team had one release of new security content via the Splunk ES Content ...

Expert Tips from Splunk Professional Services, Ensuring Compliance, and More New ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Observability Release Update: AI Assistant, AppD + Observability Cloud Integrations & ...

This month’s releases across the Splunk Observability portfolio deliver earlier detection and faster ...