Which SSL certificates are supported

[thscheidegger]

I'm trying to set up our infrastructure to use SSL encrypted connections. For this purpose I want to use existing system certificates, which are all PKCS#12 certificates.
Can I use PKCS#12 certficiates directly in splunk?

[MuS]

Hi thscheidegger

just was able to load PKCS12 certs into Splunk using this excellent wiki article.

cheers

[dwaddle · Accepted solution]

As I'm sure you're already aware, PKCS12 (aka PFX) is just a certificate container format. Splunk cannot use PKCS12 files directly, but they can easily be opened and split up into their distinct contained certificates/keys. Splunk includes the OpenSSL binaries, which have a pkcs12 command to assist with doing this.

Use splunk cmd openssl pkcs12 --help to get more information on how this works. Note this isn't a part of official Splunk - it's just an OpenSSL helper binary. Every OpenSSL installation in the world should also have this command, and there is copious information on the intarwebs about how to use it.