Security

Check HTTPS certifciates

zugji
Path Finder

Ist there a way to check SSL Webcertificate over HTTPS withing Splunk>?

Tags (3)
0 Karma
1 Solution

MuS
SplunkTrust
SplunkTrust

Hi zugji,

use the approach of @felipetesta ... or read this http://answers.splunk.com/answers/134053/ciphersuite-in-various-conf-files.html and use the provided examples to check/get the SSL certs of an Indexer like this:

$SPLUNK_HOME/bin/splunk cmd openssl s_client -connect <Indexer>:8089

hope this helps ...

cheers, MuS

View solution in original post

MuS
SplunkTrust
SplunkTrust

Hi zugji,

use the approach of @felipetesta ... or read this http://answers.splunk.com/answers/134053/ciphersuite-in-various-conf-files.html and use the provided examples to check/get the SSL certs of an Indexer like this:

$SPLUNK_HOME/bin/splunk cmd openssl s_client -connect <Indexer>:8089

hope this helps ...

cheers, MuS

felipetesta
Path Finder

I am not sure what you want to achieve, but you probably need to write an external command that opens the SSL connection, dumps the certificate and produces a Splunk-able output. Python has client SSL support, and maybe it supports dumping cert attributes.

0 Karma
Get Updates on the Splunk Community!

Adoption of RUM and APM at Splunk

    Unleash the power of Splunk Observability   Watch Now In this can't miss Tech Talk! The Splunk Growth ...

March Community Office Hours Security Series Uncovered!

Hello Splunk Community! In March, Splunk Community Office Hours spotlighted our fabulous Splunk Threat ...

Stay Connected: Your Guide to April Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars in April. This post ...