Security

Splunk certificates required for 3rd Party Application?

kartik13
Communicator

I am making a 3rd party application using Splunk API . I noticed that in server.conf, by toggling the enableSplunkdSSL to true or false secure or unsecure the splunkd port. However, I am not at all friendly with the certs. I need some help regarding certs. I need to make a request to https management port. After adding the default cert to the browser. I can access it, but through the application, I cannot. So to add those certs in the application, which file do I need to add in my application, and how to create those files with the default cert which I am getting from the browser?
How can I import those certs in my application?

Thanks in advance
Regards

0 Karma
1 Solution

kartik13
Communicator

Finally got the answer.

Splunkweb communicates to splunkd port through self-signed certificates. When i was making a call from node.js to the self signed certificate https port, it was giving me a certificate error(deduced by the rules and regulations of CORS). So i finally allowed my server to make calls to the self signed certificate https service.And you are done

I added this line in node.js to allow the server
process.env.NODE_TLS_REJECT_UNAUTHORIZED = "0";

View solution in original post

kartik13
Communicator

Finally got the answer.

Splunkweb communicates to splunkd port through self-signed certificates. When i was making a call from node.js to the self signed certificate https port, it was giving me a certificate error(deduced by the rules and regulations of CORS). So i finally allowed my server to make calls to the self signed certificate https service.And you are done

I added this line in node.js to allow the server
process.env.NODE_TLS_REJECT_UNAUTHORIZED = "0";

Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...