question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Logging does not successfully use hec_ca_file for cert verification by default

See original GitHub issue

When running splunk-kubernetes-logging 1.1.0 on OpenShift 3.11, I encountered the following error:

[warn]: #0 failed to flush the buffer. retry_time=0 next_retry_seconds=2019-04-11 23:31:24 +0000 chunk="234234234234" error_class=OpenSSL:SSL::SSLError error="SSL_connect returned=1 errorno=0 state=error: certificate verify failed (unable to get local issuer certificate)"

In order to work-around the problem, I added the following environment variable definition to the Logging fluentd-hec container in the Logging Daemonset:

env:
- name: SSL_CERT_FILE
  value: /fluentd/etc/splunk/hec_ca_file

Issue Analytics

  • State:closed
  • Created 4 years ago
  • Comments:19 (12 by maintainers)

github_iconTop GitHub Comments

3reactions
rockb1017commented, Mar 12, 2021

it is currently assigned and being reviewed. Thank you for your patience!

1reaction
sstoyanovucsdcommented, Apr 5, 2021

@rockb1017, I just tested version 1.4.7 and it works as expected. Thank you for your time and effort you put into this project!

Read more comments on GitHub >

github_iconTop Results From Across the Web

Installation, Renewal and Troubleshooting of SSL ... - Cisco
Solution. Verify that the expired default self-signed certificate is not associated with any existing Remote Logging Target. This can be ...
Read more >
Security certificate validation fails - Windows Server
Works around an issue where security certificate that's presented by a website isn't issued when it has multiple trusted certification paths ...
Read more >
Certificate Not Trusted | View Security Certificate Errors
The most common cause of a "certificate not trusted" error is that the certificate installation was not properly completed on the server (or...
Read more >
Resolve ACM certificate still pending validation - Amazon AWS
After all domains are validated, the certificate status updates from Pending validation to Success. Certificate requests using DNS validation ...
Read more >
Safely Configuring SSL Certificate Verification - Jamf
Configuring the SSL Certificate Verification setting in Jamf Pro ensures that computers only communicate with a host server that has a valid ...
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found