TLSv1.2 Handshake and API Versioning
TLSv1.2 Handshake and API Versioning
Calling policy_history.sh
+ podUrl=[Link]
+ '[' -z [Link] ]
+ API_ENDPOINT=[Link]
policyHistory
+ curl -vk -X DELETE
[Link] -H 'accept:
*/*' -H 'Content-Type: application/json'
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0*
Trying [Link]:443...
* Connected to [Link] ([Link]) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
* CAfile: /etc/ssl/certs/[Link]
* CApath: /etc/ssl/certs
} [5 bytes data]
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
} [512 bytes data]
* TLSv1.3 (IN), TLS handshake, Server hello (2):
{ [112 bytes data]
* TLSv1.2 (IN), TLS handshake, Certificate (11):
{ [6053 bytes data]
* TLSv1.2 (IN), TLS handshake, Server key exchange (12):
{ [300 bytes data]
* TLSv1.2 (IN), TLS handshake, Server finished (14):
{ [4 bytes data]
* TLSv1.2 (OUT), TLS handshake, Client key exchange (16):
} [37 bytes data]
* TLSv1.2 (OUT), TLS change cipher, Change cipher spec (1):
} [1 bytes data]
* TLSv1.2 (OUT), TLS handshake, Finished (20):
} [16 bytes data]
* TLSv1.2 (IN), TLS handshake, Finished (20):
{ [16 bytes data]
* SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384
* ALPN, server accepted to use http/1.1
* Server certificate:
* subject: CN=*.[Link]; C=US; ST=California; L=Foster City;
O=Qualys; OU=Engineering; emailAddress=ops-net@[Link]
* start date: May 2 10:49:25 2025 GMT
* expire date: May 2 10:49:24 2026 GMT
* issuer: C=US; O=Qualys, Inc.; OU=Operations; CN=Qualys Issuing CA - G1
* SSL certificate verify result: self signed certificate in certificate chain
(19), continuing anyway.
} [5 bytes data]
> DELETE /cms/v1.0/bo/policyHistory HTTP/1.1
> Host: [Link]
> User-Agent: curl/7.74.0
> accept: */*
> Content-Type: application/json
>
{ [5 bytes data]
* Mark bundle as not supporting multiuse
< HTTP/1.1 200
< Server: nginx
< Date: Fri, 12 Sep 2025 07:40:09 GMT
< Content-Type: application/json
< Content-Length: 56
< Connection: keep-alive
< Strict-Transport-Security: max-age=31536000; includeSubDomains
< X-Content-Type-Options: nosniff
< X-XSS-Protection: 1; mode=block
<
{ [56 bytes data]
100 56 100 56 0 0 1600 0 --:--:-- --:--:-- --:--:-- 1555100
56 100 56 0 0 1600 0 --:--:-- --:--:-- --:--:-- 1555
* Connection #0 to host [Link] left intact
+ RESPONSE='Independent task started for retention of policy history'
Delete policy history response: Independent task started for retention of policy
history
+ echo 'Delete policy history response: Independent task started for retention of
policy history'
Calling policy_evaluation_result.sh
+ podUrl=[Link]
+ '[' -z [Link] ]
+ API_ENDPOINT=[Link]
policyEvaluationResult
+ curl -vk -X DELETE
[Link] -H
'accept: */*' -H 'Content-Type: application/json'
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0*
Trying [Link]:443...
* Connected to [Link] ([Link]) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
* CAfile: /etc/ssl/certs/[Link]
* CApath: /etc/ssl/certs
} [5 bytes data]
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
} [512 bytes data]
* TLSv1.3 (IN), TLS handshake, Server hello (2):
{ [112 bytes data]
* TLSv1.2 (IN), TLS handshake, Certificate (11):
{ [6053 bytes data]
* TLSv1.2 (IN), TLS handshake, Server key exchange (12):
{ [300 bytes data]
* TLSv1.2 (IN), TLS handshake, Server finished (14):
{ [4 bytes data]
* TLSv1.2 (OUT), TLS handshake, Client key exchange (16):
} [37 bytes data]
* TLSv1.2 (OUT), TLS change cipher, Change cipher spec (1):
} [1 bytes data]
* TLSv1.2 (OUT), TLS handshake, Finished (20):
} [16 bytes data]
* TLSv1.2 (IN), TLS handshake, Finished (20):
{ [16 bytes data]
* SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384
* ALPN, server accepted to use http/1.1
* Server certificate:
* subject: CN=*.[Link]; C=US; ST=California; L=Foster City;
O=Qualys; OU=Engineering; emailAddress=ops-net@[Link]
* start date: May 2 10:49:25 2025 GMT
* expire date: May 2 10:49:24 2026 GMT
* issuer: C=US; O=Qualys, Inc.; OU=Operations; CN=Qualys Issuing CA - G1
* SSL certificate verify result: self signed certificate in certificate chain
(19), continuing anyway.
} [5 bytes data]
> DELETE /cms/v1.0/bo/policyEvaluationResult HTTP/1.1
> Host: [Link]
> User-Agent: curl/7.74.0
> accept: */*
> Content-Type: application/json
>
{ [5 bytes data]
* Mark bundle as not supporting multiuse
< HTTP/1.1 200
< Server: nginx
< Date: Fri, 12 Sep 2025 07:40:09 GMT
< Content-Type: application/json
< Content-Length: 69
< Connection: keep-alive
< Strict-Transport-Security: max-age=31536000; includeSubDomains
< X-Content-Type-Options: nosniff
< X-XSS-Protection: 1; mode=block
<
{ [69 bytes data]
100 69 100 69 0 0 1568 0 --:--:-- --:--:-- --:--:-- 1568
* Connection #0 to host [Link] left intact
+ RESPONSE='Independent task started for retention of policy evaluation retention'
+ echo 'Delete policy evaluation result response: Independent task started for
retention of policy evaluation retention'
Delete policy evaluation result response: Independent task started for retention of
policy evaluation retention
Calling upload_cluster_sensor_config.sh
+ podUrl=[Link]
+ '[' -z [Link] ]
+ API_ENDPOINT='[Link]
sensorConfig?sensorType=CLUSTER'
+ curl -vk -X POST
'[Link]
sensorType=CLUSTER' -H 'accept: */*' -H 'Content-Type: application/json' -d '
{
"K8sInventorySupportedResources":[
"Pod",
"Namespace",
"Node",
"Service",
"EndpointSlice",
"Ingress",
"ServiceAccount"
],
"RefreshK8sInventoryCronSchedule":"0 0 * * *",
"K8sComplianceConfig":{
"ScanSchedule":"0 */24 * * *",
"ResultFragmentSizeInKB":390
},
"MaxK8sInventoryEventUploadAtOnce":100,
"Interval_Events":[
{
"@ID":"EVENT_PROVISION",
"@IntervalSeconds":"30"
},
{
"@ID":"EVENT_UPLOAD_K8S_INVENTORY",
"@IntervalSeconds":"120"
}
]
}'
Note: Unnecessary use of -X or --request, POST is already inferred.
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0*
Trying [Link]:443...
* Connected to [Link] ([Link]) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
* CAfile: /etc/ssl/certs/[Link]
* CApath: /etc/ssl/certs
} [5 bytes data]
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
} [512 bytes data]
* TLSv1.3 (IN), TLS handshake, Server hello (2):
{ [112 bytes data]
* TLSv1.2 (IN), TLS handshake, Certificate (11):
{ [6053 bytes data]
* TLSv1.2 (IN), TLS handshake, Server key exchange (12):
{ [300 bytes data]
* TLSv1.2 (IN), TLS handshake, Server finished (14):
{ [4 bytes data]
* TLSv1.2 (OUT), TLS handshake, Client key exchange (16):
} [37 bytes data]
* TLSv1.2 (OUT), TLS change cipher, Change cipher spec (1):
} [1 bytes data]
* TLSv1.2 (OUT), TLS handshake, Finished (20):
} [16 bytes data]
* TLSv1.2 (IN), TLS handshake, Finished (20):
{ [16 bytes data]
* SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384
* ALPN, server accepted to use http/1.1
* Server certificate:
* subject: CN=*.[Link]; C=US; ST=California; L=Foster City;
O=Qualys; OU=Engineering; emailAddress=ops-net@[Link]
* start date: May 2 10:49:25 2025 GMT
* expire date: May 2 10:49:24 2026 GMT
* issuer: C=US; O=Qualys, Inc.; OU=Operations; CN=Qualys Issuing CA - G1
* SSL certificate verify result: self signed certificate in certificate chain
(19), continuing anyway.
} [5 bytes data]
> POST /cms/v1.0/bo/config/sensorConfig?sensorType=CLUSTER HTTP/1.1
> Host: [Link]
> User-Agent: curl/7.74.0
> accept: */*
> Content-Type: application/json
> Content-Length: 578
>
} [578 bytes data]
* upload completely sent off: 578 out of 578 bytes
{ [5 bytes data]
* Mark bundle as not supporting multiuse
< HTTP/1.1 200
< Server: nginx
< Date: Fri, 12 Sep 2025 07:40:09 GMT
< Content-Type: application/json
< Transfer-Encoding: chunked
< Connection: keep-alive
< Strict-Transport-Security: max-age=31536000; includeSubDomains
< X-Content-Type-Options: nosniff
< X-XSS-Protection: 1; mode=block
<
{ [64 bytes data]
100 631 0 53 100 578 1432 15621 --:--:-- --:--:-- --:--:-- 17054
* Connection #0 to host [Link] left intact
+ RESPONSE='{"configUUID":"a92e6d9e-5141-4706-8da3-8bed6561bbf4"}'
+ echo '{"configUUID":"a92e6d9e-5141-4706-8da3-8bed6561bbf4"}'
{"configUUID":"a92e6d9e-5141-4706-8da3-8bed6561bbf4"}
Calling update_default_sensor_config.sh
+ podUrl=[Link]
+ '[' -z [Link] ]
+ API_ENDPOINT=[Link]
updateDefaultConfig
+ curl -vk -X POST
[Link]
-H 'accept: */*' -H 'Content-Type: application/json' -d '
{
"@MultiArchSupport": false
}'
Note: Unnecessary use of -X or --request, POST is already inferred.
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0*
Trying [Link]:443...
* Connected to [Link] ([Link]) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
* CAfile: /etc/ssl/certs/[Link]
* CApath: /etc/ssl/certs
} [5 bytes data]
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
} [512 bytes data]
* TLSv1.3 (IN), TLS handshake, Server hello (2):
{ [112 bytes data]
* TLSv1.2 (IN), TLS handshake, Certificate (11):
{ [6053 bytes data]
* TLSv1.2 (IN), TLS handshake, Server key exchange (12):
{ [300 bytes data]
* TLSv1.2 (IN), TLS handshake, Server finished (14):
{ [4 bytes data]
* TLSv1.2 (OUT), TLS handshake, Client key exchange (16):
} [37 bytes data]
* TLSv1.2 (OUT), TLS change cipher, Change cipher spec (1):
} [1 bytes data]
* TLSv1.2 (OUT), TLS handshake, Finished (20):
} [16 bytes data]
* TLSv1.2 (IN), TLS handshake, Finished (20):
{ [16 bytes data]
* SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384
* ALPN, server accepted to use http/1.1
* Server certificate:
* subject: CN=*.[Link]; C=US; ST=California; L=Foster City;
O=Qualys; OU=Engineering; emailAddress=ops-net@[Link]
* start date: May 2 10:49:25 2025 GMT
* expire date: May 2 10:49:24 2026 GMT
* issuer: C=US; O=Qualys, Inc.; OU=Operations; CN=Qualys Issuing CA - G1
* SSL certificate verify result: self signed certificate in certificate chain
(19), continuing anyway.
} [5 bytes data]
> POST /cms/v1.0/bo/config/updateDefaultConfig HTTP/1.1
> Host: [Link]
> User-Agent: curl/7.74.0
> accept: */*
> Content-Type: application/json
> Content-Length: 33
>
} [33 bytes data]
* upload completely sent off: 33 out of 33 bytes
{ [5 bytes data]
* Mark bundle as not supporting multiuse
< HTTP/1.1 200
< Server: nginx
< Date: Fri, 12 Sep 2025 07:40:10 GMT
< Content-Length: 0
< Connection: keep-alive
< Strict-Transport-Security: max-age=31536000; includeSubDomains
< X-Content-Type-Options: nosniff
< X-XSS-Protection: 1; mode=block
<
100 33 0 0 100 33 0 197 --:--:-- --:--:-- --:--:-- 197
* Connection #0 to host [Link] left intact
+ RESPONSE=
+ echo
Calling sync_kbxml.sh
+ podUrl=[Link]
+ '[' -z [Link] ]
+ API_ENDPOINT=[Link]
+ curl -vk -X POST
[Link] -H 'accept: */*'
-H 'Content-Type: application/json'
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0*
Trying [Link]:443...
* Connected to [Link] ([Link]) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
* CAfile: /etc/ssl/certs/[Link]
* CApath: /etc/ssl/certs
} [5 bytes data]
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
} [512 bytes data]
* TLSv1.3 (IN), TLS handshake, Server hello (2):
{ [112 bytes data]
* TLSv1.2 (IN), TLS handshake, Certificate (11):
{ [6053 bytes data]
* TLSv1.2 (IN), TLS handshake, Server key exchange (12):
{ [300 bytes data]
* TLSv1.2 (IN), TLS handshake, Server finished (14):
{ [4 bytes data]
* TLSv1.2 (OUT), TLS handshake, Client key exchange (16):
} [37 bytes data]
* TLSv1.2 (OUT), TLS change cipher, Change cipher spec (1):
} [1 bytes data]
* TLSv1.2 (OUT), TLS handshake, Finished (20):
} [16 bytes data]
* TLSv1.2 (IN), TLS handshake, Finished (20):
{ [16 bytes data]
* SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384
* ALPN, server accepted to use http/1.1
* Server certificate:
* subject: CN=*.[Link]; C=US; ST=California; L=Foster City;
O=Qualys; OU=Engineering; emailAddress=ops-net@[Link]
* start date: May 2 10:49:25 2025 GMT
* expire date: May 2 10:49:24 2026 GMT
* issuer: C=US; O=Qualys, Inc.; OU=Operations; CN=Qualys Issuing CA - G1
* SSL certificate verify result: self signed certificate in certificate chain
(19), continuing anyway.
} [5 bytes data]
> POST /cms/v1.0/bo/kbxmlsync HTTP/1.1
> Host: [Link]
> User-Agent: curl/7.74.0
> accept: */*
> Content-Type: application/json
>
{ [5 bytes data]
* Mark bundle as not supporting multiuse
< HTTP/1.1 200
< Server: nginx
< Date: Fri, 12 Sep 2025 07:40:10 GMT
< Content-Length: 0
< Connection: keep-alive
< Strict-Transport-Security: max-age=31536000; includeSubDomains
< X-Content-Type-Options: nosniff
< X-XSS-Protection: 1; mode=block
<
0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0
* Connection #0 to host [Link] left intact
+ RESPONSE=
+ echo
Calling update_all_sensor_versions.sh