Security

How do you recreate new splunkweb certificates?

ramosp
New Member

During the upgrade to 6.4.2 the certificates were renewed for splunkd, but not for splunkweb
"/usr/splunk/etc/auth/ca.pem": certificate renewed
"/usr/splunk/etc/auth/cacert.pem": certificate renewed
"/usr/splunk/etc/auth/server.pem": certificate renewed

0 Karma

masonmorales
Influencer
0 Karma

somesoni2
Revered Legend

Those certs, for splunkweb, doesn't come by default with splunk installation and hence not updated during upgrade. You would've either used a self signed certs OR third party certs, so follow the same process to get new certs and update the same in your web.conf.

0 Karma
Get Updates on the Splunk Community!

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...

[Live Demo] Watch SOC transformation in action with the reimagined Splunk Enterprise ...

Overwhelmed SOC? Splunk ES Has Your Back Tool sprawl, alert fatigue, and endless context switching are making ...

What’s New & Next in Splunk SOAR

Security teams today are dealing with more alerts, more tools, and more pressure than ever.  Join us on ...