-
Notifications
You must be signed in to change notification settings - Fork 195
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Splunk: extend test coverage by TLS #4127
Comments
I tried to run the splunk https tests by following https://docs.splunk.com/Documentation/Splunk/9.2.0/Security/ConfigTLSCertsS2S The first task is to configure splunk server to SSL. It is possible by provide necessary config parameters and by restarting afterwards. The config parameter might by added to the configuration file by copying (overwriting following file - /opt/splunk/etc/system/local/server.conf)) (see my POC) There are several options. (You can validate the the certificates by running
• You can generate certificates via annotations -> but in this case, I encountered a problem with self-signed certificate, therefore I left that way. According to openSsl verification both optoins (1 and 2) shows that server responds with a proper certificate. The second part of the job is to configure splunk client properly for ssh. The splunk component lacks ssl configuration options (I reported the issue as https://issues.apache.org/jira/browse/CAMEL-20393). In my investigation, I was setting the default sslContext during the start of the tests (which is not a nice solution, but should help with the investigation) I tried several different approaches (see my POC) All my attempts failed on handshake_failure, with no information, what might be wrong. (openSsl client works successfully, so I expect an error in configuration of splunk client and its ssl. I'm keeping my POC in the branch https://github.com/JiriOndrusek/camel-quarkus/tree/splunk-ssh-POC |
This is follow-up issue for #4085
See comment for more information.
The text was updated successfully, but these errors were encountered: