October 2014 – Duane Waddle

Quick Hit – disabling SSLv3 in Splunk

2014-10-142014-10-16 Duane 2 Comments Splunk

Update 20141015 – Splunk’s official advisory has been released. Update 20141016 – Changed from a specific TLS1.2 cipher to the generic “TLSv1.2” suite. Hat tip to @techxicologist. If you’ve not seen that SSLv3 is irreparably broken, go read about it, then grab a strong drink and come back. Splunk (as of release 6.1) does not […]

Splunk .conf 2014 slides and notes

2014-10-122015-10-26 Duane 2 Comments Splunk

This week I had the pleasure of speaking at Splunk .conf 2014. George Starcher and I spoke on configuring Splunk’s various SSL options, with the goal of providing a cookbook with SSL configurations appropriate for moving from a POC/trial install into production. Other that some audio problems (sorry!), I thought the session went very well. […]