Splunk SOAR (f.k.a. Phantom)

Phantom integration giving the ssl error, how to disable them?


I am seeing the below issue,
Httpsconnectionpool(host='phantomdev..com', port=XXX): max retries exceeded with url: /rest/ph_user?include_automation=true&filter_token_key='' (caused by sslerror(sslerror(1, u'[ssl: certificate_verify_failed] certificate verify failed (_ssl.c:741)'),))

i was trying to disable the ssl, which was in README, was not able to succeeded because of i haven't seen those conf.

Labels (2)
0 Karma

Splunk Employee
Splunk Employee

Did the link and advice from @ansusabu and/or @WalshyB help you get this solved?

0 Karma


You can use the curl command given in README for disabling ssl

0 Karma

Path Finder

https://docs.splunk.com/Documentation/PhantomApp/2.7.5/Install/ConfigureCerts, see "Manage HTTPS certificate validation using configuration files", did you do those steps followed by a restart?

0 Karma
Register for .conf21 Now! Go Vegas or Go Virtual!

How will you .conf21? You decide! Go in-person in Las Vegas, 10/18-10/21, or go online with .conf21 Virtual, 10/19-10/20.