Hey everyone, We have configured a SQL server and a HF, the HF instance will have a connection to the MySQL server. We successfully installed Slunk DB connect 3.5.1 on the HF, however when we try to connect to the database via ssl we receive the following error, you can check it in the screenshot attached. Connecting to the DB server without SSL enabled works just fine. We also installed mysql client on the HF just to test if we have configured the certificates correctly and we are able to connect from the HF to the SQL server via SSL successfully. So we suspect there is a special way not mentioned in the documents how to set the app to use the certificates for connection to the SQL server. I tried adding the certs to the default.jks file located in $HOME_SPLUNK/etc/apps/splunk_app_db_connect/keystore , I also imported the certs to the jave keystore and truststore but without any success. We also did tcpdump on port 3306 on the server hosting MySQL and, noticed that when we try to connect via ssl we get bad hand shake with a packet named continuation data, however doing the same thing connecting from the mysql client we are able to see a connection forming successfully with exchanging certs between the host and the client. Thanks in advance for the help and please let me know if anything else is needed.
... View more
Yeah same issue in 2021, from an app perspective there is no information where you should import the keys. I hope someone give us an answer. I have tried importing the keys in the java keystore and in the app into the default.jks file. I also tried creating a custom keystore and trust store, whoever it seems the app doesn't pick it up.
... View more