[gpfsug-discuss] Encryption - checking key server health (SKLM)

[Wahl, Edward]

I’m extremely curious as to this answer as well.

At one point a while back I started looking into this via the KMIP side with things, but ran out of time to continue.
http://docs.oasis-open.org/kmip/testcases/v1.4/kmip-testcases-v1.4.html
http://docs.oasis-open.org/kmip/testcases/v1.4/cnprd01/test-cases/kmip-v1.4/

Ed


From: gpfsug-discuss-bounces at spectrumscale.org <gpfsug-discuss-bounces at spectrumscale.org> On Behalf Of Oesterlin, Robert
Sent: Wednesday, February 19, 2020 10:25 AM
To: gpfsug main discussion list <gpfsug-discuss at spectrumscale.org>
Subject: [gpfsug-discuss] Encryption - checking key server health (SKLM)

I’m looking for a way to check the status/health of the encryption key servers from the client side - detecting if the key server is unavailable or can’t serve a key. I ran into a situation recently where the server was answering HTTP requests on the port but wasn’t returning they key. I can’t seem to find a way to check if the server will actually return a key.

Any ideas?


Bob Oesterlin
Sr Principal Storage Engineer, Nuance

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://gpfsug.org/pipermail/gpfsug-discuss_gpfsug.org/attachments/20200219/4096c6c2/attachment.htm>