Security

Intermediate Certificate

Pateza
New Member

Hi,

I'm new to creating self-signed SSL certificates. I've been following the Splunk documentation https://docs.splunk.com/Documentation/Splunk/8.0.6/Security/Self-signcertificatesforSplunkWeb

I've created both the Root Cert and the Server Cert but as I approach the end of the documentation, I notice it is specified that the Server, Intermediate and Root Certs need to be appended to each other.

No where in the steps followed, was there any creation of an intermediate certificate and so I am unsure where to get this from / how to create one to complete the steps outlined in this documentation.

Any assistance would be greatly appreciated.

Thanks!

Labels (3)
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

Often with self-signing certificates, people create a root CA and an intermediate CA (which is authenticated with their root CA). It is then this intermediate CA which is used to sign the server certificate. This makes it slightly easier if the intermediate CA needs to be recreated since you (hopefully) don't need to recreate the root CA and have to set up the trust chain from scratch. At least, that's my understanding.

0 Karma

richgalloway
SplunkTrust
SplunkTrust

I believe certificate files can be concatenated.

cat server.pem intermediate.pem root.pem > merged.pem
---
If this reply helps you, Karma would be appreciated.
0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Persistent Queue at TcpOut — One of Splunk's Most Practical Features

Splunk introduced persistent queueing at the tcpout layer as one of the most practical resilience features in ...

Skip the Awkward Silence: Have a .conf-ersation at .conf26

Picture this. You arrive at .conf26 already having your socializing and networking plans mapped out. No ...

Rethinking Zero Trust: From Product Purchases to Logical Control Evidence

Implementing Zero Trust (ZT) across complex environments often falters at the very beginning due to a ...