tls-config¶

vb ssl-config|tls-config [SUBCOMMAND] [OPTIONS]

Description¶

This command is used to view or modify the TLS (Transport Layer Security) configuration for VisionByte. TLS (formerly SSL) is the encryption technology used for secure HTTPS transport.

Subcommands¶

vb ssl-config remove-exception¶

vb ssl-config remove-exception DOMAINS [--all]

Description¶

Remove TLS cert exceptions for the domains listed. Or remove them all if the –all option is specified.

vb ssl-config scrub¶

vb ssl-config scrub [--force]

Description¶

Remove all SSL configuration data from the repository. Use –force to omit the confirmation.

vb ssl-config show¶

vb ssl-config show [-v]

Description¶

Show the TLS configuration. Add -v to see additional explanation

Examples¶

Inspect current TLS settings (verbose)

$ vb ssl-config show -v
OpenSSL-version:      OpenSSL 3.5.4 30 Sep 2025  (0x030500040)

  The version of the OpenSSL library being used
  by this instance of VisionByte.  Version 3.0.0 or
  later is recommended.

Trust store location
  SSL_CERT_FILE:      
  SSL_CERT_DIR:       

    Environment variables that determine alternative locations for
    the root certificates used by VisionByte when it is acting as a SSL
    client. If specified, these alternative locations take top
    priority.

  ssl-ca-location:    

    This setting is the name of a file or directory that contains
    the complete set of root certificates used by VisionByte when it
    is acting as a SSL client. If defined, this setting takes
    priority over built-in paths.

  OpenSSL-cert-file:  /usr/local/ssl/cert.pem
  OpenSSL-cert-dir:   /usr/local/ssl/certs

    The default locations for the set of root certificates
    used by the "vb sync" and similar commands to verify
    the identity of servers for "https:" URLs. These values
    come into play when VisionByte is used as a TLS client.  These
    values are built into your OpenSSL library.

  Trust store used:   

    The location that is actually used for the root certificates
    used to verify the identity of servers for "https:" URLs.
    This will be one of the first of the five locations listed
    above that actually exists.

ssl-identity:        

  This setting is the name of a file that contains the PEM-format
  certificate and private-key used by VisionByte clients to authenticate
  with servers. Few servers actually require this, so this setting
  is usually blank.

Remove a stored TLS exception for specific domains

$ vb ssl-config remove-exception example.com,api.example.com

Remove all stored TLS exceptions

$ vb ssl-config remove-exception --all

Scrub all TLS configuration data from the repository

$ vb ssl-config scrub --force