vcf_vrli_certificate

State module for the vRLI appliance certificate.

Idempotency: the state parses the leaf cert PEM to extract its serial number (a hex string) and compares it to the serialNum reported by GET /api/v2/certificate. Reinstalls only when they differ. Requires the standard-library ssl module (bundled).

saltext.vcf.states.vcf_vrli_certificate.certificate_present(name, cert, key, chain=None, profile=None)[source]

Ensure the appliance is presenting the given leaf certificate.

cert — PEM string for the leaf. key — PEM string for its private key. chain — optional intermediate chain PEM.

Idempotency: compares the leaf’s serial number against the serialNum field on GET /api/v2/certificate. Non-matching triggers a POST that replaces the cert (which restarts the API listener — expect the next state in the run to reconnect).