I was able to get splunk to start by removing my site-specific TLS settings. After starting splunk the first time, I restored my site-specific settings back to how they were before the upgrade, and restarted splunk. It seems to be fine now.
These are the config changes I made:
In /opt/splunk/etc/system/local/server.conf:
Changed these lines:
[sslConfig]
cipherSuite = EECDH+AESGCM
ecdhCurves = secp256r1, secp384r1, secp521r1
to
[sslConfig]
#cipherSuite = EECDH+AESGCM
#ecdhCurves = secp256r1, secp384r1, secp521r1
Also, in /opt/splunk/etc/system/local/web.conf:
[settings]
cipherSuite = EECDH+AESGCM
ecdhCurves = secp256r1, secp384r1, secp521r1
changed to:
[settings]
#cipherSuite = EECDH+AESGCM
#ecdhCurves = secp256r1, secp384r1, secp521r1
Again, after starting splunk and completing the config migration, I restored the files and restarted splunk.
... View more