must be signed by the same CA, so that the TLS connection will be established. See your switch’s manual for information about configuring TLS on your switch.

5.6.2 Openflow Controller keystore and truststore locations and passwords

The Openflow Controller’s configurations for keystore/truststore are located in the com.hp.sdn.ctl.of.impl.ControllerManager configuration. The keystore and keystore.password properties capture the location of the keystore and the password of the keystore respectively. Similarly, the truststore and truststore.password capture the location of the truststore and the password of the truststore respectively.

Figure 42 Components that reference OpenFlow keystore and truststore

A controller restart is required if these configurations are changed.

5.7 REST authentication

The SDN Controller relies on token-based authentication to authenticate its REST APIs. In other words, all REST APIs except the /auth and /rsdoc APIs require an authentication token embedded in an "X-Auth-Token" header to be included with each REST request. The /auth API allows you to obtain a token, while the /rsdoc API provides live REST API documentation information about the controller’s REST API. The next section describes how to obtain a token from the /auth API.

66 SDN Controller authentication