📦 CSR Generator App - Installation & Configuration Guide

🔽 1. Download the App

Obtain the app package in .tar.gz or .spl format (e.g., csr_generator.spl).

🔐 2. Log In to Splunk Web

Navigate to: https://<your-splunk-host>:8000
Log in with an admin-level account.

⚙️ 3. Install the App via Splunk Web

Go to Apps > Manage Apps.
Click Install app from file.
Upload the csr_generator.spl or .tar.gz package.
Click Upload and complete the installation steps.

✅ 4. Verify Installation

Return to Manage Apps and ensure CSR Generator is listed and enabled.

🛠 Configuration Instructions

🔗 5. Ensure OpenSSL is Available

The app uses OpenSSL via Splunk's embedded binary:

$SPLUNK_HOME/bin/splunk cmd openssl version

Make sure this path is valid on both Linux and Windows.

🐍 6. Confirm Python Environment

Splunk 8.x+ requires Python 3. Run:

$SPLUNK_HOME/bin/splunk cmd python --version

The app runs inside Splunk’s Python runtime (no external dependencies).

🚀 Running the CSR Generator

▶️ 7. Generate a CSR and Private Key

From the Search & Reporting app, run:

| gencsr common_name="example.com" country="US" state="CA" locality="San Francisco" organization="Example Corp" organizationalunit="IT" password="yourpassword" subjectaltname="www.example.com,mail.example.com"

🔖 Parameters

Parameter	Required	Description
`common_name`	✅	Domain or hostname for the certificate
`country`	❌	Default: `"US"`
`state`	❌	Default: `"N/A"`
`locality`	❌	Default: `"N/A"`
`organization`	❌	Default: `"N/A"`
`organizationalunit`	❌	Default: `"N/A"`
`password`	❌	Protects private key (default: `"dummypassword"`)
`subjectaltname`	❌	Comma-separated list of SAN domains

📤 Output Includes

csr: Certificate Signing Request (PEM format)
key: Private Key (PEM format)

💾 8. Save Results

Copy the CSR and key from the output panel and save locally for certificate signing.

⚙️ Optional Customization

🛠 9. Custom OpenSSL Path (if needed)

If OpenSSL is not located at $SPLUNK_HOME/bin/splunk cmd openssl, modify the Python script:

splunk_bin = "splunk.exe" if platform.system() == "Windows" else "splunk"
openssl_cmd = [os.path.join(os.environ['SPLUNK_HOME'], 'bin', splunk_bin), "cmd", "openssl"]

🧪 10. Debugging

Check error output directly in Splunk search results.
Or use the Splunk logs: Settings > Server settings > Server Logs
Look for messages from csr_generator.

🔁 11. Python Compatibility

All scripts are compatible with Python 3.x.
The app has been tested on Splunk 9.1+ on both Linux and Windows.

✅ You're ready! The CSR Generator app is now fully installed and operational inside Splunk.

CSR Generator for Splunk

5