Validates whether the custom SSL certificate is suitable for MVX cluster formation. These certificates are used by RAbbitMq, Cassandra, Consul, and MVXclient.
This command is a part of cluster creation commands.
Syntax
mvx cluster validate-cluster-certs certificate-name <ssl_cert_name> ca-name <ca_cert_name>
Parameters
ssl_cert_name
The name of the SSL certificate.
ca_cert_name
The name of the TLS CA certificate. This certificate is used to validate whether the SSL certificate is signed by the mentioned CA certificate/bundle.
Output fields
Public Key Length
Number of characters in the public key. The key length should be less than or equal to 2048.
Key Algorithm
Type of key algorithm. The type of key algorithm should be rsaEncryption.
Signature Algorithm
Type of signature algorithm. The type of signature algorithm should be sha256 with RSA encryption.
Client Purpose
Whether the certificate is valid for the client.
Server Purpose
Whether the certificate is valid for the server.
Certificate Chain Verification Status
Whether the SSL certificate is signed by the provided CA certificate/bundle.
Final Validation Result
Whether the SSL certificate is valid for MVX cluster formation.
Examples
The following example validates a SSL certificate test-cert with the CA certificate intermediate:
hostname (config) # mvx cluster validate-cluster-certs certificate-name test-cert ca-name intermediate Certificate Details of test-cert: Public Key Length : 2048 Key Algorithm : rsaEncryption Signature Algorithm : sha256WithRSAEncryption Client Purpose : yes Server Purpose : yes Certificate Requirement: Public Key Length : >= 2048 Key Algorithm : rsaEncryption Signature Algorithm : sha256WithRSAEncryption Client Purpose : yes Server Purpose : yes Certificate Chain Verification Status: unable to get issuer certificate Final Validation Result : Invalid
The following example validates a SSL certificate test-cert with the CA certificate chain:
hostname (config) # mvx cluster validate-cluster-certs certificate-name test-cert ca-name chain Certificate Details of test-cert: Public Key Length : 2048 Key Algorithm : rsaEncryption Signature Algorithm : sha256WithRSAEncryption Client Purpose : yes Server Purpose : yes Certificate Requirement: Public Key Length : >= 2048 Key Algorithm : rsaEncryption Signature Algorithm : sha256WithRSAEncryption Client Purpose : yes Server Purpose : yes Certificate Chain Verification Status: ok Final Validation Result : Valid
User role
Admin or Operator
Command mode
Config
Supported appliances
This command is supported on the following appliances running the specified releases or later:
Intelligent Virtual Execution - Server: Release 10.0