Is there a way to change the certificate used for port 8089?

[arber]

Hello,
during our vulnerability assessment we found that the certificate that port 8089 uses is vulnerable as its less than 2048 bit.
We have already changed the certificate used for port 8000 to 2048 bit. Is there way to do the same even for the one used on port 8089? can we bound the same cert used for port 8000 to 8089 ?

thanks

[jrodman · Accepted solution]

Yes, the use of your own certificate for splunkd SSL is a documented topic. See, for example http://docs.splunk.com/Documentation/Splunk/6.1.4/Security/TypesofSplunkconfigurationsthatcanuseSSL

Note that splunkd has a few odd requirements for the contents of the pem files, so I suggest you walk through the variant of the instructions that most closely matches your goals.