How to verify and disable the Vertica HTTPServer (Port 8443)

Products

• Network Observability
• CA Performance Management

Issue/Introduction

Security vulnerability scanners may flag Vertica Data Repository nodes for unsecured or untrusted SSL certificates on port 8443. This port is utilized by the Vertica HTTPServer (HTTPService), which was introduced in Vertica 23.x.

Environment

• DX NetOps Performance Management (all supported releases)
• Data Repository (Vertica 23.x and higher)

Resolution

Run the following command as a user capable of running netstat to see if port 8443 is advertised:

 

OS Check

netstat -anp | grep :8443

 

vSQL Check

Log in to the vSQL prompt (or connect via adminTools) and query the configuration parameters:

SELECT * FROM configuration_parameters WHERE parameter_name = 'EnableHTTPServer';

• value = 0: The service is disabled.
• No rows returned: The service is enabled (enabled is the default state).