Hi, Thank you for your response. Yes, the new certificate is issued by the same internal CA (PepsiCoCA01). The new certificate includes both Root CA and Intermediate CA in the chain. When I run the command: openssl s_client -connect ppsplix01.corp.pep.pvt:9997 -showcerts I get the error: "no peer certificate available" and "ssl handshake failure". This confirms that the indexer is not presenting any certificate. We suspect that Splunk 7.2.3 may not be able to properly load or handle the renewed certificate, as the environment still uses this version (due for upgrade). Could you please confirm if this issue is related to the old OpenSSL version in Splunk 7.2.3, or if there is any workaround to make it work temporarily until we upgrade? Thank you.
... View more
