Are wildcard certificates supported with Splunk and https?

Splunk Employee
Splunk Employee

wondering if Splunk https works with third-party wildcard certs.

so far I got my Splunk indexer to start using my third-party wildcard cert by changing web.conf to use the absolute path vs the relative path that the Splunk doc pages suggest, but splunk/https won't serve pages.

We have a third-party cert we use so that https://*.com is signed.

Since this can be insecure and may be hard to do, many vendors will only support certificates that go to a specific dns cname or a record, such as

My web.conf is:

enableSplunkWebSSL = 1
privKeyPath = /etc/foo/certs/
caCertPath = /etc/foo/cert.pem

Splunk Web server starts with no errors, but when I hit the login page I get:


Can anyone confirm if wildcard certs with Splunk are really supported or not?

0 Karma

Splunk Employee
Splunk Employee

I've used splunkweb with wildcard certificates before with no problems - Have you tried accessing it with openssl to see if that reveals any more specific information? Also check web_service.log to confirm that it's loaded the certificate without error

openssl s_client -connect hostname:port 
*NEW* Splunk Love Promo!
Snag a $25 Visa Gift Card for Giving Your Review!

It's another Splunk Love Special! For a limited time, you can review one of our select Splunk products through Gartner Peer Insights and receive a $25 Visa gift card!


Or Learn More in Our Blog >>