Installation

Why am I getting Invalid key in stanza [sslConfig] in server.conf for slVersionsForClient?

rholm01
Explorer

[sslConfig]
sslVersions = *,-ssl2
slVersionsForClient = *,-ssl2

Per the documentation
* The syntax is the same as the 'sslVersions' setting above.

Those entries are identical, so I don't understand why I am getting an error for one and not both.

Tags (1)
0 Karma

ragedsparrow
Contributor

So, from the spec file:

sslVersions = <versions_list>
* Comma-separated list of SSL versions to support for incoming connections.
* The versions available are "ssl3", "tls1.0", "tls1.1", and "tls1.2".
* The special version "*" selects all supported versions.  
  The version "tls"
  selects all versions tls1.0 or newer.
* If a version is prefixed with "-" it is removed from the list.
* SSLv2 is always disabled; "-ssl2" is accepted in the version list 
  but does nothing.
* When configured in FIPS mode, "ssl3" is always disabled regardless
  of this configuration.
* Default: The default can vary. See the 'sslVersions' setting in 
  the $SPLUNK_HOME/etc/system/default/server.conf file for the 
  curent default.

If you are trying to restrict ssl2, there is no reason to modify the sslVersion or sslVersionsForClient settings. However. Where I think your syntax is wrong is that you have a preceding comma, but nothing in front of it:

[sslConfig]
sslVersions = ,-ssl2
slVersionsForClient = ,-ssl2

I tested the following and had no issue:

[sslConfig]
sslVersions = -ssl2
sslVersionsForClient = -ssl2

It also appears there may be a typo in yours as well; You had slVersionsForClient instead of sslVersionsForClient

0 Karma
Get Updates on the Splunk Community!

Index This | Why did the turkey cross the road?

November 2025 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  &#x1f680; Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Feel the Splunk Love: Real Stories from Real Customers

Hello Splunk Community,    What’s the best part of hearing how our customers use Splunk? Easy: the positive ...