Security

Creating new CSR unable to find shared library libssl.so.0.9.8

jason_hubbard
Path Finder

I am try to generate a CSR on CentOS 6 based on the Splunk admin documentation for "Generate a CSR". I used the following command:
Command
$SPLUNK_HOME/bin/openssl req -newkey rsa:2048 -key [certificate name].pem -out [certificate name].csr
Result
$SPLUNK_HOME/bin/openssl: error while loading shared libraries: libssl.so.0.9.8: cannot open shared object file: No such file or directory

The $SPLUNK_HOME/lib/ shows the following in the directory ...
lrwxrwxrwx 1 splunk splunk 15 Sep 29 10:53 libssl.so -> libssl.so.0.9.8
-r-xr-xr-x 1 splunk splunk 324464 Sep 8 15:54 libssl.so.0.9.8

ashrafmr
Engager

If you do not use Splunk's own packaged libraries then you will have circumvented the defects and security fixes that have been addressed with Splunk's use of those dependent libraries, i.e. those identified in the Splunk release notes.

  • I would add the Splunk library path, /opt/splunk/lib, as one line into a text file (such as spunk.conf) and place that file in the /etc/ld.so.conf.d directory.

  • Then with root privilege run ldconfig.

You should then be able to use Splunks own bundled OpenSSL at /opt/splunk/bin/openssl

ifnadmin
Engager

Still works 6 years later.  Thank you!

~T

0 Karma

JohnK08345
Engager

You can also just export LD_LIBRARY_PATH=/opt/splunk/lib, if you don't want mess with getting root access.

reswob4
Builder

This worked for me. @ashrafmr, you should accept this answer.

0 Karma

dsharp1970
Engager

Worked great for me. Thanks!

0 Karma

rossikwan
Path Finder

try using the openssl located in /usr/bin or type the absolute path as below

/usr/bin/openssl genrsa -des3 -out mySplunkWebPrivateKey.key 2048

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...