Hi,
I'm trying to configure Splunk forwarders and indexers to use our own certificates and while checking the documentation (https://docs.splunk.com/Documentation/Splunk/7.2.6/Security/ConfigureSplunkforwardingtousesignedcertificates) I've seen the following:
**Configure your forwarders to use your certificates**
...
[tcpout:group1]
server=10.1.1.197:9997
disabled = 0
clientCert = The full path to the client SSL certificate in PEM format. If this value is provided, the connection will use SSL.
useClientSSLCompression = Disabling tls compression can cause bandwidth issues.
**sslPassword = The password for the CAcert**
I don't understand how can the CAcert password needed as this is a private password.
Is this correct? Is the documentation okay? Could someone explain the reason for this?
Thanks.
↧