Hello,
We tried to install the latest universal forwarder silently on our Windows machines using the following command
msiexec /i splunkforwarder-7.1.2-a0c72a66db66-x64-release.msi
DEPLOYMENT_SERVER=":8089"
LAUNCHSPLUNK=0
SERVICESTARTTYPE=auto
CERTFILE="%CD%\server.pem"
CERTPASSWORD=
ROOTCACERTFILE="%CD%\cacert.pem"
SPLUNKPASSWORD=
AGREETOLICENSE=yes /quiet
When the service is starting, however, we get the following error in splunkd.log, and it will not connect to DC.
03-28-2019 13:28:07.041 +0100 ERROR SSLCommon - Can't read key file C:\Program Files\SplunkUniversalForwarder\etc\auth\server.pem errno=101077092 error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt.
03-28-2019 13:28:07.041 +0100 ERROR HTTPServer - SSL context could not be created - error in cert or password is wrong
03-28-2019 13:28:07.041 +0100 ERROR HTTPServer - SSL will not be enabled
When I paste the certpassword into etc/system/local/server.conf and restart the service it will come up correctly and connect to DC to receive its apps.
Where is the error?
Regards,
Klaus
↧