ProbeSsl
This method returns (host and thumbprint) tuples for all PSC/MGMT/DR hosts to which
SRM should connect under specified root PSC node.
Synopsis
@optional HostThumbprintInfo[] probeSsl(String host, @optional int port, @optional String vcHost)
The
probeSsl
method
returns an array of HostThumbprintInfo
structures. Each entry
contains host address and required thumbprint to establish connection to the
services on that host. The probeSsl
method has the following
parameters:
Field | Description |
---|---|
host | Host name or IP address of the root PSC
node. |
port | Port of the root PSC node. When not provided
the default value of 443 is used. |
vcHost | Host where the VC is running. In case of
embedded environment this field should not be specified. In this
case the host on which the VC is running is the PSC
host. |
HostThumbprintInfo
is
a data object that contains host name/address and required thumbprint to establish
connection to the services on that host. It has the following fields:
Field | Description |
---|---|
host | FQDN or IP address of the host. |
thumbprint | SHA-2 hash of the
SSL certificate of the server at the specified host. Format
is two capital hexadecimal digits separated by ':'. For
example: CF:2B:8A:63:9F:71:63:7C:5D:61:3C:83:A7:D0:17:E0:CA:7C:89:5B:F3:D9:2B:BB:75:12:AA:C2:7C:C5:F3:9A Example of SSL
command to extract SHA-2 fingerprint from host is: openssl
s_client -connect <host>:<port> <
/dev/null 2>/dev/null | openssl x509 -fingerprint -sha256 -noout -in
/dev/stdin |