How do we encrypt SSL between forwarders and indexers, shouldn't we use the same certificates in both servers.
How does encryption work if we are using different certificates in both the servers.
Might want to start here. https://wiki.splunk.com/images/f/fb/SplunkTrustApril-SSLipperySlopeRevisited.pdf
https://splunk.webex.com/splunk/lsr.php?RCID=da90ccae281af46da9e4a3b46c076a0b
SSL is, one of the, most difficult area...but, least documented.
