Security

SSL expired, now what?

ben_leung
Builder

I have an indexer and forwarder. They have been configured with self sign cert ssl. Lets say the server cert has expired, okay now you just create another cert.

What do you do when the root cert has expired, what will happen? Do you have to configure a new set of certs?

The default certs expire 3 years, so does the rootCA and server certs also expire in 3 years?

Is the root cert suppose to expire at a different time than the server cert?

Tags (2)
0 Karma
1 Solution

gkanapathy
Splunk Employee
Splunk Employee

Yes, when the root cert has expired, you will need a new cert chain. I believe that root CAs can't issue certificates beyond their own validity. The root cert can last longer than the child certs.

View solution in original post

0 Karma

gkanapathy
Splunk Employee
Splunk Employee

Yes, when the root cert has expired, you will need a new cert chain. I believe that root CAs can't issue certificates beyond their own validity. The root cert can last longer than the child certs.

0 Karma

gkanapathy
Splunk Employee
Splunk Employee

You can generate new certs using the scripts in the $SPLUNK_HOME/bin/ directory.

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...