Description
This command displays the configuration of encrypted HTTP (SSL) for Vservers in the cluster. Depending on the requirements of the individual node's or cluster's web services (displayed by the
vserver services web show command), this encryption might or might not be used. If the Vserver does not have a certificate associated with it, SSL will not be available.
Parameters
{
[-fields <fieldname>, ...]
If you specify the -fields <fieldname>, ... parameter, the command output also includes the specified field or fields. You can use '-fields ?' to display the fields to specify.
|
[-instance ]
}
If you specify the -instance parameter, the command displays detailed information about all fields.
[-vserver <vserver name>] - Vserver
Identifies a Vserver for hosting SSL-encrypted web services.
[-ca <text>] - Server Certificate Issuing CA
Filters the display of SSL configuration by specifying the Certificate Authority (CA) that issued the server certificate.
[-serial <text>] - Server Certificate Serial Number
Filters the display of SSL configuration by specifying the serial number of a server certificate.
[-common-name <FQDN or Custom Common Name>] - Server Certificate Common Name
Filters the display of SSL configuration by specifying the common name for the server certificate.
[-server-enabled {true|false}] - SSL Server Authentication Enabled
Filters the display of SSL configuration according to whether the SSL server authentication is enabled or disabled. Vservers have self-signed certificates automatically generated during their creation. These Vserver self-signed certificates are server-enabled by default.
[-client-enabled {true|false}] - SSL Client Authentication Enabled
Filters the display of SSL configuration according to whether the SSL client authentication is enabled or disabled. You can enable client authentication only when server authentication is enabled.
Examples
The following example displays the configured certificates for Vservers.
cluster1::security ssl> show
Serial Server Client
Vserver Number Common Name Enabled Enabled
--------- ------ --------------------------------------- ------- -------
cluster1 516C3CB3
cluster1.company.com true true
vs0 516816D4
vs0.company.com true false
2 entries were displayed.
