Splunk Dev

How to get Splunk Python on CentOS to use SSL/Crypto?

user4455
Explorer

It seems Splunk's Python on CentOS 7.2 does not have SSL support.

[root@splunk-test bin]# ./python
Python 2.7.11 (default, Jan  5 2017, 01:46:57) 
[GCC 5.3.0] on linux2
Type "help", "copyright", "credits" or "license" for more information.
>>> import _ssl
Traceback (most recent call last):
  File "<stdin>", line 1, in <module>
ImportError: libssl.so.1.0.0: cannot open shared object file: No such file or directory

I also get crypto errors from _hashlib

[root@splunk-test bin]# ldd /opt/splunk/lib/python2.7/lib-dynload/_hashlib.so
    linux-vdso.so.1 =>  (0x00007fffaf3f2000)
    libssl.so.1.0.0 => not found
    libcrypto.so.1.0.0 => not found
    libpthread.so.0 => /lib64/libpthread.so.0 (0x00007f7e85bb5000)
    libc.so.6 => /lib64/libc.so.6 (0x00007f7e857f4000)
    /lib64/ld-linux-x86-64.so.2 (0x00007f7e85de0000)

This does not seem to be an issue on Ubuntu.

Any tips on how to get Splunk's python using ssl/crypto?

Thanks

Labels (1)
0 Karma
1 Solution

starcher
Influencer

I don't think you were running under the Splunk python context.

If you are in a full Splunk install under linux with default location try something like
/opt/splunk/bin/splunk cmd python

Then import ssl.

View solution in original post

starcher
Influencer

I don't think you were running under the Splunk python context.

If you are in a full Splunk install under linux with default location try something like
/opt/splunk/bin/splunk cmd python

Then import ssl.

mhergh
Explorer

This did it for me too, but I still needed to do an: "export LD_LIBRARY_PATH=/opt/splunk/lib" to make it finally work!!!!.

However, great answer; I am not able to award points otherwise I would have done it!

0 Karma

user4455
Explorer

That did it, thanks!

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...