Re: SSL Communication on WebClient Plugin

Thanks Laurent,

The approach you had provided has given clear understanding of configuring SSL.

Except the case which we have in our environment describing below:

Location of hosting web client plugin (.zip file) server:

      \\.. \VMware\Infrastructure\tomcat\webapps\ (client plugin is deployed into VMware’s tomcat server as part of our installation).

Xml snippet of the server is as follows:

<server>

   <url>https://a-web-server-path/mypluginPackage.zip</url>

   <description>

      <label>### plugin</label>

      <summary>My first vSphere Client plugin</summary>

   </description>

   <company>VMware</company>

   <-- SHA1 thumbprint of the server hosting the .zip file -->

   <serverThumbprint>3D:E7:9A:85:01:A9:76:DD:AC:5D:83:1C:0E:E0:3C:F6:E6:2F:A9:97</serverThumbprint>

   <type>HTTPS</type>

   <adminEmail>your-email</adminEmail>

</server>

Location of communicating server using SSL (3^rd party)

      \\..\Program Files (x86)\..\..\Server

          Web client plugin needs to talk to the server (C++) in the location mentioned above.

Xml snippet of the server is as follows:

<server>

   <url>https://3rdPartyserverip:port</url>

   <description>

      <label>3^rd Party Server Location</label>

      <summary>>### plugin will communicate to server using SSL</summary>

   </description>

   <company>###</company>

   <-- SHA1 thumbprint of the 3^rd party server from where the web client plugin fetches the data -->

   <serverThumbprint>3D:E7:9A:85:01:A9:76:DD:AC:5D:83:1C:0E:E0:3C:F6:E6:CF:B9:07</serverThumbprint>

   <type>HTTPS</type>

   <adminEmail>your-email</adminEmail>

</server>

If I understand correctly then the overall extension file looks like as attached (please find attached registration.xml) along with this  thread.

Adding to this one more question/doubt :
Do we still need to register our certificate in cacerts file in vmware's runtimes lib/security or
the above configuration is enough ?