[Users] SpiceHTML5, noVNC console and Spice Proxy mixable?

Gianluca Cecchi gianluca.cecchi at gmail.com
Fri Dec 13 17:08:39 EST 2013


On Fri, Dec 13, 2013 at 5:57 PM, Alon Bar-Lev wrote:

>>
>>
>> Under /etc/pki/ovirt-engine/keys I only have these files:
>> [root at tekkaman keys]# ll
>> total 16
>> -rw-r-----. 1 apache apache 1828 Feb 10  2013 apache.key.nopass
>> -rw-r-----. 1 apache apache 2677 Feb 10  2013 apache.p12
>> -rw-------. 1 root   root   1828 Feb 10  2013 engine_id_rsa
>> -rw-r-----. 1 ovirt  ovirt  2677 Feb 10  2013 engine.p12
>>
>> and for certs:
>>
>> [root at tekkaman old_logs]# ll /etc/pki/ovirt-engine/certs/
>> total 60
>> -rw-r--r--. 1 root   root   4810 Feb 10  2013 01.pem
>> -rw-r--r--. 1 root   root   4957 Feb 10  2013 02.pem
>> -rw-r--r--. 1 root   root   4957 Feb 10  2013 03.pem
>> -rw-r--r--. 1 ovirt  ovirt  4931 Feb 10  2013 04.pem
>> -rw-r-----. 1 apache apache 4957 Feb 10  2013 apache.cer
>> -rw-r--r--. 1 root   root   1480 Feb 10  2013 ca.der
>> -rw-r--r--. 1 root   root   4957 Feb 10  2013 engine.cer
>> -rw-r--r--. 1 ovirt  ovirt  4931 Feb 10  2013
>> tekkaman.localdomain.localcert.pem
>>
>> Can I directly proceed with step 2 or is it a problem that I have no
>> /etc/pki/ovirt-engine/keys/websocket-proxy.p12 in place at the moment?
>
> Yes, after running setup you should notice these.
>

Wow, finally!
I got it at the end. Thanks!
I verified both SpiceHTML5 and noVNC work now

[root at tekkaman ~]# ll  /etc/pki/ovirt-engine/keys
total 24
-rw-r-----. 1 apache apache 1828 Feb 10  2013 apache.key.nopass
-rw-r-----. 1 apache apache 2677 Feb 10  2013 apache.p12
-rw-------. 1 root   root   1828 Feb 10  2013 engine_id_rsa
-rw-r-----. 1 ovirt  ovirt  2677 Feb 10  2013 engine.p12
-rw-------. 1 ovirt  ovirt  1828 Dec 13 22:30 websocket-proxy.key.nopass
-rw-------. 1 root   root   2669 Dec 13 22:30 websocket-proxy.p12

[root at tekkaman ~]#  ll /etc/pki/ovirt-engine/certs/
total 76
-rw-r--r--. 1 root   root   4810 Feb 10  2013 01.pem
-rw-r--r--. 1 root   root   4957 Feb 10  2013 02.pem
-rw-r--r--. 1 root   root   4957 Feb 10  2013 03.pem
-rw-r--r--. 1 ovirt  ovirt  4931 Feb 10  2013 04.pem
-rw-r--r--. 1 root   root   4952 Dec 13 22:30 05.pem
-rw-r-----. 1 apache apache 4957 Feb 10  2013 apache.cer
-rw-r--r--. 1 root   root   1480 Feb 10  2013 ca.der
-rw-r--r--. 1 root   root   4957 Feb 10  2013 engine.cer
-rw-r--r--. 1 ovirt  ovirt  4931 Feb 10  2013 tekkaman.localdomain.localcert.pem
-rw-r--r--. 1 root   root   4952 Dec 13 22:30 websocket-proxy.cer

But this means that what documented here, that was what I followed
some weeks ago, is incomplete:
http://www.ovirt.org/Features/noVNC_console#Setup_Websocket_Proxy_on_the_Enging_Post_Install

?

Or simply that my initial ovirt engine version didn't have this
feature at all so that websocket certificate part wasn't created on
February 2013?

BTW: initial test of my windows XP guest not usable...
see this screencast where first half is with firefox 26 and second
part with chrome 31.0.1650.63, both run from a fedora 19 client
https://drive.google.com/file/d/0BwoPbcrMv8mvLUMyOWNPVUFOSkE/edit?usp=sharing

But I'm going to do more tests with more kind of guests and eventually
post in separate thread.

Thanks again Alon and Frank

Gianluca


More information about the Users mailing list