Security

Having trouble with using certificates

Charlython
Observer

Hi there! 

I've been using Splunk for a while and now i want  to use certificates to making it more secure.

The problem comes when, afteer following the documentation, splunk web doesn't  starts.

My pem certificate has 2 certificates inside and a private key, and I also tried using the private key in a .key file and the certificates together in the pem and it neither works.

Any advice or solution?

Thank you!

Labels (2)
0 Karma

matt8679
Path Finder

Make sure your Splunk user has the proper permissions to read the certs.

web.conf

enableSplunkWebSSL = 1

privKeyPath = /opt/splunk/etc/auth/mycert.key

serverCert = /opt/splunk/etc/auth/mycert.pem

 

Depending on the method you used, you must combine the server certificate, the private key, and the public certificate, in that order, into a single file. The combined file must be in privacy-enhanced mail (PEM) format.

cat <server certificate file> <server private key file> <certificate authority certificate file> > <combined server certificate file>

https://docs.splunk.com/Documentation/Splunk/9.0.0/Security/HowtoprepareyoursignedcertificatesforSpl... 

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Community Content Calendar, September edition

Welcome to another insightful post from our Community Content Calendar! We're thrilled to continue bringing ...

Splunkbase Unveils New App Listing Management Public Preview

Splunkbase Unveils New App Listing Management Public PreviewWe're thrilled to announce the public preview of ...

Leveraging Automated Threat Analysis Across the Splunk Ecosystem

Are you leveraging automation to its fullest potential in your threat detection strategy?Our upcoming Security ...