Security

How to check certificates?

Timrit
New Member

I am new in Splunk and I currently need to check "Valid to:" date from our corporation hundreds of certificates in our shared folder.
But unfortunately I am not lucky enough to get .cer files work with the app. It reads only my .PEM files.
My all other .cer files are just hang in there without any timestamps.
Am I missing something here, or what can I do?

Tags (1)
0 Karma
1 Solution

damann
Communicator

Im not sure if this will work for you, but you can try the following if your certificates are x509 encoded:

$SPLUNK_HOME/bin/splunk cmd openssl x509 -enddate -noout -in file.cer

make sure your $SPLUNK_HOME ist set correctly or navigate manually into your bin folder.
Replace file.cer with your certificate you want to check.

Please let me know if this works for you.

View solution in original post

0 Karma

Timrit
New Member

Yep, that did the trick... Super thanks...
Some reason I need to restart the service every time I made any changes in folder to get Splunk find new files, but that´s not an issue....

0 Karma

damann
Communicator

Im not sure if this will work for you, but you can try the following if your certificates are x509 encoded:

$SPLUNK_HOME/bin/splunk cmd openssl x509 -enddate -noout -in file.cer

make sure your $SPLUNK_HOME ist set correctly or navigate manually into your bin folder.
Replace file.cer with your certificate you want to check.

Please let me know if this works for you.

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...