Getting Data In

Trying to upgrade our forwarder, why are we getting error "OpenSSL: error...handshake failure"?

sahils
New Member

Hello Team,

We tried to upgrade our Splunk Forwarder on Uslv-dapp-mon07 and mon08, but getting the error below for both Servers. Can you please help us?

Attached Screenshot.

0 Karma

woodcock
Esteemed Legend

You need these:

http://www.duanewaddle.com/quick-hit-disabling-sslv3-in-splunk/

Who: George Starcher and Duane Waddle, Defense Point Security
What: Avoid the SSLippery SSLope of Default SSL
Recording: https://splunk.webex.com/splunk/lsr.php?RCID=da90ccae281af46da9e4a3b46c076a0b
Slides: Media:SplunkTrustApril-SSLipperySlopeRevisited.pdf

And an older version here::
https://conf.splunk.com/session/2014/conf2014_DuaneWaddleGeorgeStarcher_Self_UsingTrack.pdf

ryanoconnor
Builder

What version of Splunk were you running and what are you running now?

You can disable sslv3 in web.conf. See the following page:

http://docs.splunk.com/Documentation/Splunk/6.4.1/Security/SetyourSSLversion

Another page you'll want to review is the following

http://www.splunk.com/view/SP-CAAANKE

0 Karma

renjith_nair
SplunkTrust
SplunkTrust

Looks like your screen shot was not uploaded;just paste the errors

Happy Splunking!
0 Karma

sahils
New Member

It shows below error

OpenSSL: error :14077410:SSL routines:SSL23_GET_SERVER_Hello:sslv3:alert handshake failure

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...