Security

Splunk findout openssl version used

gowthammahes
Path Finder

HI,

Currently I am using splunk version of Version:8.1.2. And i would like to know the openssl version which is used in splunk version. So i ran 2 commands to know the openssl version but i am getting 2 different results from that commands.

so which one do i need to consider???

1. splunk@splunkidx$ ./splunk/bin/splunk cmd openssl version
OpenSSL 1.0.2w-fips 9 Sep 2020

2.splunk@splunkidx$ openssl version
OpenSSL 1.1.1k FIPS 25 Mar 2021

 

Labels (1)
0 Karma
1 Solution

somesoni2
Revered Legend

The first command give version of openssl that ships with Splunk. The second command gives openssl version installed by OS, hence the difference.

View solution in original post

sysadminorc
New Member

My testing shows Splunkforwarder 9.0.1 isn't running the vulnerable OpenSSL 3.0

[root@localhost opt]# export LD_LIBRARY_PATH=/opt/splunkforwarder/lib
[root@localhost opt]# /opt/splunkforwarder/bin/openssl version
WARNING: can't open config file: /opt/splunk-home/openssl/openssl.cnf
OpenSSL 1.0.2zf-fips 21 Jun 2022 

 

0 Karma

somesoni2
Revered Legend

The first command give version of openssl that ships with Splunk. The second command gives openssl version installed by OS, hence the difference.

Get Updates on the Splunk Community!

Get Operational Insights Quickly with Natural Language on the Splunk Platform

In today’s fast-paced digital world, turning data into actionable insights is essential for success. With ...

What’s New in Splunk Observability Cloud – June 2025

What’s New in Splunk Observability Cloud – June 2025 We are excited to announce the latest enhancements to ...

Almost Too Eventful Assurance: Part 2

Work While You SleepBefore you can rely on any autonomous remediation measures, you need to close the loop ...