I added a signed certificate from InfoSec to our Splunk indexer and currently pointing to that `.pem` and `.key` file in `/etc/system/local/web.conf`.. He scanned it with the nessus scanner and says the Splunk signed cert is still showing up on port 8089. So what `.conf` file should I add the stanza below so I can pick up the signed cert rather than default to Splunks self signed cert?
Here is my current stanza under `web.conf`
[settings]
enableSplunkWebSSL = 1
privKeyPath = /opt/splunk/etc/auth/splunkweb/mySplunkWebPrivateKey.key
caCertPath = /opt/splunk/etc/auth/splunkweb/splunk-emc01.pem
sslVersions = tls1.1, tls1.2
↧