Logging does not successfully use hec_ca_file for cert verification by default
See original GitHub issueWhen running splunk-kubernetes-logging 1.1.0 on OpenShift 3.11, I encountered the following error:
[warn]: #0 failed to flush the buffer. retry_time=0 next_retry_seconds=2019-04-11 23:31:24 +0000 chunk="234234234234" error_class=OpenSSL:SSL::SSLError error="SSL_connect returned=1 errorno=0 state=error: certificate verify failed (unable to get local issuer certificate)"
In order to work-around the problem, I added the following environment variable definition to the Logging fluentd-hec container in the Logging Daemonset:
env:
- name: SSL_CERT_FILE
value: /fluentd/etc/splunk/hec_ca_file
Issue Analytics
- State:
- Created 4 years ago
- Comments:19 (12 by maintainers)
Top Results From Across the Web
Installation, Renewal and Troubleshooting of SSL ... - Cisco
Solution. Verify that the expired default self-signed certificate is not associated with any existing Remote Logging Target. This can be ...
Read more >Security certificate validation fails - Windows Server
Works around an issue where security certificate that's presented by a website isn't issued when it has multiple trusted certification paths ...
Read more >Certificate Not Trusted | View Security Certificate Errors
The most common cause of a "certificate not trusted" error is that the certificate installation was not properly completed on the server (or...
Read more >Resolve ACM certificate still pending validation - Amazon AWS
After all domains are validated, the certificate status updates from Pending validation to Success. Certificate requests using DNS validation ...
Read more >Safely Configuring SSL Certificate Verification - Jamf
Configuring the SSL Certificate Verification setting in Jamf Pro ensures that computers only communicate with a host server that has a valid ...
Read more >
Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free
Top Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
it is currently assigned and being reviewed. Thank you for your patience!
@rockb1017, I just tested version 1.4.7 and it works as expected. Thank you for your time and effort you put into this project!