Does anyone have any instructions on how to update SSL certs using CLI?
hello. does anyone have any instructions on how to update SSL certs using CLI?
Answers
-
The exact process depends on which context, and how you created the certs in Cribl. For example, in this case I'm in the Leader node context. I created the cert object within cribl. I could very easily navigate to the location on disk and replace the files:
0 -
for worker group context, a similar path exists. Swap out the file, commit, deploy.
0 -
yes, this is exactly what we did in our DEV environment.
0 -
the Private Key file was generated using a script.
0 -
the Certificate file was gotten from our CA.
0 -
we simply updated the paths.
0 -
within the General > TLS settings.
0 -
but for some reason, the process was not the same.
0 -
you can replace directly on the FS, then restart the Leader
0 -
we got a spinning wheel.
0 -
what is FS?
0 -
at this point, we are merely trying to get back to the original state. so, any advice on how we can point the TLS settings to the original Private Key and Certificate files would be great.
0 -
file system
0 -
the config screen can point to anywhere on your system, or to a cribl managed area if you simply replace the files with the originals & restart, you will be in good shape
0 -
i've got about 15 mins if you want to jump on a zoom
0 -
yes.
0 -
let's jump on a call.
0 -
who do i send an e-mail to?
0 -
-
Regarding the original question .. are you looking for something like this? https://docs.cribl.io/stream/destinations-splunk-lb/#ssl|https://docs.cribl.io/stream/destinations-splunk-lb/#ssl
0
