Refine your search:

Have anyone else experience busted block signing in 4.2?

Every install of 4.2 we have is not executing the block signature.

We can't tell if it is just not signing the data or if the Show Source check is failing for another reason.

E.

asked 08 Apr '11, 22:14

Edub's gravatar image

Edub
1457
accept rate: 25%


One Answer:

This seems to be covered as an open issue in the 4.2 release notes:

http://www.splunk.com/base/Documentation/4.2/ReleaseNotes/KnownIssues

BlockSignature content validation does not work with distributed search.

BlockSignature content validation does not work in 4.2 (GA), even without distributed search, and will falsely claim the data has been tampered with. (SPL-38082)

link

answered 08 Apr '11, 22:22

dwaddle's gravatar image

dwaddle ♦
15.6k2924
accept rate: 33%

Post your answer
toggle preview

Follow this question

Log In to enable email subscriptions

RSS:

Answers

Answers + Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "Title")
  • image?![alt text](/path/img.jpg "Title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Tags:

×13

Asked: 08 Apr '11, 22:14

Seen: 933 times

Last updated: 08 Apr '11, 22:22

Copyright © 2005-2012 Splunk Inc. All rights reserved.