ProbeSsl

This method returns (host and thumbprint) tuples for all PSC/MGMT/DR hosts to which SRM should connect under specified root PSC node.

Synopsis

@optional HostThumbprintInfo[] probeSsl(String host, @optional int port, @optional String vcHost)
The
probeSsl
method returns an array of
HostThumbprintInfo
structures. Each entry contains host address and required thumbprint to establish connection to the services on that host. The
probeSsl
method has the following parameters:
Field
Description
host
Host name or IP address of the root PSC node.
port
Port of the root PSC node. When not provided the default value of 443 is used.
vcHost
Host where the VC is running. In case of embedded environment this field should not be specified. In this case the host on which the VC is running is the PSC host.
HostThumbprintInfo
is a data object that contains host name/address and required thumbprint to establish connection to the services on that host. It has the following fields:
Field
Description
host
FQDN or IP address of the host.
thumbprint
SHA-2 hash of the SSL certificate of the server at the specified host. Format is two capital hexadecimal digits separated by ':'. For example:
CF:2B:8A:63:9F:71:63:7C:5D:61:3C:83:A7:D0:17:E0:CA:7C:89:5B:F3:D9:2B:BB:75:12:AA:C2:7C:C5:F3:9A
Example of SSL command to extract SHA-2 fingerprint from host is:
openssl s_client -connect <host>:<port> < /dev/null 2>/dev/null |
openssl x509 -fingerprint -sha256 -noout -in /dev/stdin

Faults

  • RuntimeFault
  • SitePairingFault