Security

Having trouble with using certificates

Charlython
Observer

Hi there! 

I've been using Splunk for a while and now i want  to use certificates to making it more secure.

The problem comes when, afteer following the documentation, splunk web doesn't  starts.

My pem certificate has 2 certificates inside and a private key, and I also tried using the private key in a .key file and the certificates together in the pem and it neither works.

Any advice or solution?

Thank you!

Labels (2)
0 Karma

matt8679
Path Finder

Make sure your Splunk user has the proper permissions to read the certs.

web.conf

enableSplunkWebSSL = 1

privKeyPath = /opt/splunk/etc/auth/mycert.key

serverCert = /opt/splunk/etc/auth/mycert.pem

 

Depending on the method you used, you must combine the server certificate, the private key, and the public certificate, in that order, into a single file. The combined file must be in privacy-enhanced mail (PEM) format.

cat <server certificate file> <server private key file> <certificate authority certificate file> > <combined server certificate file>

https://docs.splunk.com/Documentation/Splunk/9.0.0/Security/HowtoprepareyoursignedcertificatesforSpl... 

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Can’t Make It to Boston? Stream .conf25 and Learn with Haya Husain

Boston may be buzzing this September with Splunk University and .conf25, but you don’t have to pack a bag to ...

Splunk Lantern’s Guide to The Most Popular .conf25 Sessions

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Unlock What’s Next: The Splunk Cloud Platform at .conf25

In just a few days, Boston will be buzzing as the Splunk team and thousands of community members come together ...