Security

Splunk Enterprise Windows - openssl.cnf file default location?

NK
Explorer

WARNING: can't open config file: C:\\gitlab_runner\\builds\\build_home\\splunk/ssl/openssl.cnf

So why is the default location of openssl.cnf not %SPLUNK_HOME% ?

 

 

C:\Splunk>%SPLUNK_HOME%\bin\openssl version -d
OPENSSLDIR: "C:\\gitlab_runner\\builds\\build_home\\splunk/ssl"

 

 

 Do I need to create the above "gitlab_runner" directory structure to suppress the warnings?

(Using Splunk Enterprise Windows  v8.2.10)

Labels (2)
0 Karma

NK
Explorer

Discovered when I was doing the following:

C:\Splunk>%SPLUNK_HOME%\bin\openssl x509 -enddate -noout -in %SPLUNK_HOME%\etc\auth\server.pem
WARNING: can't open config file: C:\\gitlab_runner\\builds\\build_home\\splunk/ssl/openssl.cnf
notAfter=May 17 23:44:06 2026 GMT

 

0 Karma

inventsekar
SplunkTrust
SplunkTrust

WARNING: can't open config file: C:\\gitlab_runner\\builds\\build_home\\splunk/ssl/openssl.cnf

the path was configured mistakenly i think. you can see the first portion is windows specific path and the last portion high lighted above, its linux specific..

so, your conf file should have path like this:
C:\\gitlab_runner\\builds\\build_home\\splunk\\ssl\\openssl.cnf

0 Karma

NK
Explorer

@inventsekar wrote:

the path was configured mistakenly i think.


Where is that path configured in a Windows Splunk Enterprise installation? 

Update:

Looks like @rbreton answered it here in 2017!

I need another Windows environment variable:

OPENSSL_CONF = %SPLUNK_HOME%\openssl.cnf

0 Karma
Get Updates on the Splunk Community!

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

(view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...

Adoption of Infrastructure Monitoring at Splunk

  Splunk's Growth Engineering team showcases one of their first Splunk product adoption-Splunk Infrastructure ...