Splunk Enterprise

Splunk Add-on for AWS > unable to get local issuer certificate (_ssl.c:1091)

New Member


I am trying to configure CloudTrail via S3 in Splunk Add-on for AWS, but after configuring, it getting failed to validate the certificate, i have already added local certificate in cacert.pem on the following locations.

D:\Program Files\Splunk\etc\apps\Splunk_TA_aws\bin\3rdparty\python3\certifi
D:\Program Files\Splunk\etc\apps\Splunk_TA_aws\bin\3rdparty\python3\botocore
D:\Program Files\Splunk\Python-3.7\Lib\site-packages\certifi
D:\Program Files\Splunk\Python-3.7\Lib\site-packages\botocore
D:\Program Files\Splunk\Python-3.7\Lib\site-packages\botocore\vendored\requests

But as of now no luck, still getting same error.



  File "D:\Program Files\Splunk\Python-3.7\lib\http\client.py", line 966, in send
  File "D:\Program Files\Splunk\etc\apps\Splunk_TA_aws\bin\3rdparty\python3\boto\https_connection.py", line 131, in connect
  File "D:\Program Files\Splunk\Python-3.7\lib\ssl.py", line 1238, in wrap_socket
  File "D:\Program Files\Splunk\Python-3.7\lib\ssl.py", line 423, in wrap_socket
  File "D:\Program Files\Splunk\Python-3.7\lib\ssl.py", line 870, in _create
  File "D:\Program Files\Splunk\Python-3.7\lib\ssl.py", line 1139, in do_handshake
ssl.SSLCertVerificationError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1091)



Saugata D

Labels (1)
0 Karma
Get Updates on the Splunk Community!

Splunk Community Platform Survey

Hey Splunk Community, Starting today, the community platform may prompt you to participate in a survey. The ...

Observability Highlights | November 2022 Newsletter

 November 2022Observability CloudEnd Of Support Extension for SignalFx Smart AgentSplunk is extending the End ...

Avoid Certificate Expiry Issues in Splunk Enterprise with Certificate Assist

This blog post is part 2 of 4 of a series on Splunk Assist. Click the links below to see the other ...