Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

SplunkHttpEventCollector is not able to use SSL cert , error in azure app service #58

Open
gorarohit opened this issue Apr 27, 2022 · 4 comments

Comments

@gorarohit
Copy link

gorarohit commented Apr 27, 2022

I have Azure App Service hosting Asp Net Core API ( . Net Core 3.1 ).

my Splunk target

<target name="Splunk"
				xsi:type="SplunkHttpEventCollector"
				serverUrl="https://<splunkserver>:8088/services/collector/event"
				token="token"
				source="${logger}"
				sourceType="_json"
				index="index"
				retriesOnError="3"
				batchSizeBytes="0"
				batchSizeCount="0"			
				maxConnectionsPerServer="10"
				ignoreSslErrors="false">
			<layout xsi:type="JsonLayout">
				<attribute name="date" layout="${date:format=MM-dd-yyyy hh\:mm\:ss.fff tt}" />
				<attribute name="host" layout="${hostname}" />
				<attribute name="logger" layout="${logger}" />
				<attribute name="message" layout="${message} ${exception}" />
			</layout>			
</target> 

Error

SplunkHttpEventCollector(Name=Splunk_wrapped): Failed to send LogEvents Exception: Splunk.Logging.HttpEventCollectorException: Failed to send request: InternalServerError
 ---> System.Net.Http.HttpRequestException: The SSL connection could not be established, see inner exception.
 ---> System.Security.Authentication.AuthenticationException: The remote certificate is invalid according to the validation procedure.

I have uploaded valid SSL certificate in azure app service store and verified cert is available using code.

Note: I don't want to ignore ssl errors using ignoreSslErrors = true
I also verified ssl cert validation using curl.

@AlanBarber
Copy link
Owner

Is this a valid purchased SSL cert or a self signed?

That error message is usually an indicator of self-signed certs, which is exactly what the ignoreSslErrors option is for.

@gorarohit
Copy link
Author

gorarohit commented May 4, 2022

This is a purchased valid CA cert and we verified this using CURL. This is a Entripsie level signed certs.

@gorarohit
Copy link
Author

@AlanBarber any update on this will be helpful

@zhosafwan
Copy link

@AlanBarber Any update, I have same error

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

3 participants