Save Autograph Self with airSlate SignNow

Copy signed attempt

hey everyone thanks for checking out this video here we're about to go in and configure splunk to use https and configure the certificates in splunk to use a custom ca certificate we'll be using openssl for creating the csrs and the ca is a windows server here in my lab so here we are at my home page for the splunk instance and to start out let's check out the security information as you can see we're only using the standard http protocol and not the secure version of it this is the first thing that we need to fix when initially installing splunk enterprise the application defaults to using the unsecure http in order to fix this let's hop into the command line and modify one of the configuration files i'm ssh into the splunk box and am in the slash tamp splunk directory here i'm going to use nano to modify the localweb.com file so that we can turn on the ability to use the https protocol to do so i just have to configure the enable splunk web ssl configuration item to true and let me save it and exit all right now that that's done for those changes to take effect i'm going to simply restart the splunk application using this command the directory that you may have to type in may vary depending on your installation but in general the splunk home directory goes here then the splunk item is in the is in the bin directory all right now once this finished restarting we should refresh our browser and now we can see that we're prompted with the security warning that the site's not trusted since this is the default self-signed certificate that the splunk server is presenting to our browser it wouldn't be trusted by default we can bypass this and create an exception if we wanted to but instead we're going to modify the certificate that it has looking at it though we can validate right here that it's a self-signed one by seeing the information that it by seeing the information that is presenting the organization is splunk user the email is support splunk.com these are all indicators that it's the self sign cert all right let me remove the exception real quick and hop back into our cli terminal there are many different ways you can use openssl in order to generate your csrs and convert your certificates so the way that i'm showing you isn't the only way first we need to create the private key for the request we're going to use aes256 for the encryption and a 2048-bit key let me type in the passcode and we're done as you can see the key is right here in the attempt directory up next we need to generate the csr or certificate signing request this is the item that we will give to the certificate authority to sign and issue a certificate to us from in order to do so here's the command using openssl takes in the private key and spits out the csr for us we have to enter some additional information when we're using the default open ssl configuration such as the country state organization and so on each one of these items helps to identify the certificate and gives you information as to who the owner is after all that i'm going to decrypt the private key so that we can have it available if needed and after we're done with that we can view the csr information by using the cat command for it what i'm going to do with this is copy and paste it from here into my ca this is the information that the certificate authority needs in order to be able to generate the cert from the beginning of the request to the end and in my ca self-serve window i'm going to go to request a certificate then advanced certificate request we copy the csr information into the request block and i'm changing the template to web server since that's what we're using the search for and once we hit submit we're taken to the issuance page here's where we can download the certificate and the chain we want der encoded here and we'll download the circ i'm opening up my cyberduck window so i can transfer the newly downloaded cert to the server now i renamed it off screen to abrahamsplunk.cer and once that transfers we can validate that it's here okay good now i need to convert the cert to the pem format as that's what's required by splunk to be able to use it properly using the open ssl program again here's the command to do so my inform is going to be der and the out form will be pem i have a directory set up in the etsy slash auth area called custom that i want to drop the certificates for splunk to use into so i'm navigating there first then i'll use my mv command to get the pemser and the key file there i'm going to change the ownership of the files to the splunk user so that it can manage them as well now the only thing left to do is to modify the configuration to tell splunk where the certs are that we wanted to use if we don't do this splunk will just use the default self sign one like we saw before so we open the localweb.com file again that we modified earlier all we have to do is enter the information for the private keypath and the server cert in this case from that directory that we just moved them to all right let's save this now to restart the splunk server so that the new configuration can take effect i'm just going to speed this up so we don't have to wait once it comes back up though we can do the web page refresh again and see that the ssl connection is now showing that we trust this certificate i installed the ca certificate into the browser earlier so it knew to trust anything that the abraham ca signed pulling up the actual cert we can see all of this information that i input during the csr process in openssl and we can see the algorithms that were used for it and as you can see we also have the signers information here we can look at the abraham dc cert that was used to sign our servicer and that's all there is to it i hope you enjoyed this video on how to create and install an ssl certificate in splunk be sure to subscribe for more how-to videos