Splunk integration SSL errors

Some integrators have reported that the Splunk integration (v1.1.) throws errors when pointed at specific xMatters On-Demand instances.

For example:

Traceback (most recent call last):
  File "", line 1, in 
  File "/opt/splunk/lib/python2.7/site-packages/httplib2/__init__.py", line 1421, in request
    (response, content) = self._request(conn, authority, uri, request_uri, method, body, headers, redirections, cachekey)
  File "/opt/splunk/lib/python2.7/site-packages/httplib2/__init__.py", line 1171, in _request
    (response, content) = self._conn_request(conn, request_uri, method, body, headers)
  File "/opt/splunk/lib/python2.7/site-packages/httplib2/__init__.py", line 1122, in _conn_request
  File "/opt/splunk/lib/python2.7/site-packages/httplib2/__init__.py", line 911, in connect
    raise SSLHandshakeError(e)
httplib2.SSLHandshakeError: [Errno 1] _ssl.c:533: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed


To resolve this issue, you can configure the xMatters.py script to use the .crt in the "requests" python library instead of the one packaged with the integration:

  1. Open the <$SPLUNK_HOME>/etc/apps/xmatters_alert/bin/xMatters.py file in a text editor.
  2. Locate the following line:
CERT = os.path.join( os.environ['SPLUNK_HOME'], 'etc','apps','xmatters_alert','bin', 'scripts', 'sf-class2-root.crt' )
  1. Replace it with the following:
CERT = os.path.join( os.environ['SPLUNK_HOME'], 'lib', 'python2.7', 'site-packages', 'requests', 'cacert.pem' )
  1. Save and close the file.




xMatters internal reference: DTN-5099

Have more questions? Submit a request


Please sign in to leave a comment.
Powered by Zendesk