[sslConfig]
sslRootCAPath = $SPLUNK_HOME/etc/auth/ca-cert.pem
enableSplunkdSSL = true
sslVersions = tls1.2
serverCert = $SPLUNK_HOME/etc/auth/servercertificate.pem
# servercertificate.pem is a symlink to the real cert.pem on the instance 
 
sslPassword = {{ splunk_ssl_cert_password }}
requireClientCert = false
 
sslVerifyServerCert = true
sslCommonNameToCheck = {% for host in groups.all_splunk_instances %}{{ host }}, {% endfor %}