VMware VCM 5.3 - TRANSPORT LAYER SECURITY IMPLEMENTATION Guide de l'utilisateur télécharger pdf (Page 40)

key = /opt/FastScale/var/certs/private/service.key

; Either CAfile or CAPath, but not both, should be defined

; CAfile = /opt/FastScale/var/certs/ca-cert.pem

; Certificate Authority directory

; This is the directory in which stunnel will look for certificates

when using the verify.

; Note that the certificates in this directory should be named

; XXXXXXXX.0 where XXXXXXXX is the hash value of the DER encoded

subject of the

; cert (the first 4 bytes of the MD5 hash in least significant byte

order).

; The hash can be obtained with the command: openssl x509 -noout -in

cert.pem -hash

CApath = /opt/FastScale/var/certs

client = no

foreground = no

output = /opt/FastScale/logs/stunnel.log

pid = /opt/FastScale/logs/stunnel.pid

[fsmesgds]

accept = 40610

connect = localhost:21310

; Authentication stuff

verify = 3

[fsrepods]

accept = 40607

connect = 127.0.0.1:21307

; Authentication stuff

verify = 3

3. Restart stunnel.

service FastScale restart

What to do next

After configuring the Stunnel on the OS Provisioning server, you must configure the communication on

the VCM Collector. See "Configure Stunnel on the VCM Collector" on page 40.

Configure Stunnel on the VCM Collector

The VCM Collector installation installs Stunnel files to establish secure communication between VCM and

the OS Provisioning Server SOAP services. You perform this configure Stunnel to ensure the connection

on the Collector is operational.

vCenter Configuration Manager Installation and Getting Started Guide

40 VMware, Inc.

1 2 ... 35 36 37 38 39 40 41 42 43 44 45 ... 257 258

Pas de commentaire

VMware VCM 5.3 - TRANSPORT LAYER SECURITY IMPLEMENTATION Guide de l'utilisateur Page 40