Security

SSL Certificate on AWS Application Load Balancer: how to resolve the SSL Self Signed Cert Vulnerability for port 8089?

jaracan
Communicator

Hi Team,

We are using Splunk in AWS EC2 Instance. The SSL Certificate is uploaded on the AWS Application Load Balancer. With that, how can we resolve the SSL Self Signed Cert Vulnerability for port 8089? Any insights?

I already had added the confs below, but still the vulnerability was still there.

web.conf

[settings]
sslVersions = *,-ssl3
enableSplunkWebSSL = true
cipherSuite = TLSv1.2:!aNULL

server.conf

[sslConfig]
sslVersions = *,-ssl3
Labels (2)
0 Karma

nickhills
Ultra Champion

Hi @jaracan
Although you have set a cert on the ALB, you will by default still be using the default certs on the running Splunk instances.

See this excellent presentation from .conf15 about how to issue your own certs for your entire Splunk deployment.
https://conf.splunk.com/session/2015/conf2015_DWaddle_DefensePointSecurity_deploying_SplunkSSLBestPr...

If my comment helps, please give it a thumbs up!

jithu9194
Engager

Could you upload the presentation here, it seems to be expired 

isoutamo
SplunkTrust
SplunkTrust
Hi
this is probably from previous year https://www.duanewaddle.com/wp-content/uploads/2014/10/Splunk-SSL-Presentation.pdf
There are some other interesting documents too on this site.
r. Ismo
0 Karma
Get Updates on the Splunk Community!

Sending Metrics to Splunk Enterprise With the OpenTelemetry Collector

This blog post is part of an ongoing series on OpenTelemetry. The OpenTelemetry project is the second largest ...

What's New in Splunk Cloud Platform 9.0.2208?!

Howdy!  We are happy to share the newest updates in Splunk Cloud Platform 9.0.2208! Analysts can benefit ...

Want a chance to win $500 to the Splunk shop? Take our IT Incident Management Survey!

  Top Trends & Best Practices in Incident ManagementSplunk is partnering up with Constellation Research to ...