SSL Communication

By default, DCLI verifies SSL certificates for HTTPS requests and throws an error message if it is unable to verify the certificate.

DCLI bundles certificates from

certifi.io

by using the

cacert.pem

file provided in the DCLI package. If you want to override this certification method, you have the following options.

Use the DCLI_CACERTS_BUNDLE environment variable to specify a path to a custom certificates store file.

Use the

+cacert-file

DCLI option to specify a path to a custom certificates store file.

Use the

+skip-server-verification

DCLI option to skip certificates verification.

Skipping certificates verification presents a security risk.

VMware vSphere SDKs and Tools 6.7