Security

SSL "obsolete key" warning in chrome browser

Lucas_K
Motivator

Has anyone been able to get Splunk Web settings that do not trigger these browser reports?

web.conf

[settings]
enableSplunkWebSSL = 1
cipherSuite = TLSv1.2:!eNULL:!aNULL:!SHA1
supportSSLV3Only = False
sslVersions = tls1.2

I still get this

Obsolete Connection Settings
The connection to this site uses a strong protocol (TLS 1.2), an obsolete key exchange (RSA), and a strong cipher (AES_128_GCM).
0 Karma
1 Solution

Lucas_K
Motivator

Solved. No splunk settings were changed from the above to make this work.

alt text

This warning can be removed by using ellipitcal curve cert keys.

Old blog post with examples here : http://blogs.splunk.com/2014/06/03/generate-elliptical-curve-certkeys-for-splunk/

The down side is that your CA needs to be signing EC certs. If they aren't then you can't use ec keys.

View solution in original post

0 Karma

Lucas_K
Motivator

Solved. No splunk settings were changed from the above to make this work.

alt text

This warning can be removed by using ellipitcal curve cert keys.

Old blog post with examples here : http://blogs.splunk.com/2014/06/03/generate-elliptical-curve-certkeys-for-splunk/

The down side is that your CA needs to be signing EC certs. If they aren't then you can't use ec keys.

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...