<div dir="ltr"><div style="font-family:arial,helvetica,sans-serif" class="gmail_default">So first of all, we don't support replacing oVirt internal CA which is used to sign host certificates. This internal CA is also used to sign HTTPS certificate by default, but you can provided your own HTTPS certificate signed by custom CA. The correct steps how to do that are (assuming you have you custom CA certififcate in PEM format and HTTPS ceritificate along with private key in PKCS12 format):<br><br>1. Add your commercially issued certificate to the host-wide trust store.<br> cp YOUR-3RD-PARTY-CA-CERT.pem /etc/pki/ca-trust/source/anchors<br> update-ca-trust<br><br></div><div style="font-family:arial,helvetica,sans-serif" class="gmail_default">2. Remove Apache CA link pointing to oVirt internal<br> rm /etc/pki/ovirt-engine/apache-ca.pem<code><br><br></code></div><div style="font-family:arial,helvetica,sans-serif" class="gmail_default">3. Install your custom certificate (including complete certificate chain)<code><br></code> mv YOUR-3RD-PARTY-CA-CERT.pem /etc/pki/ovirt-engine/apache-ca.pem<code><br></code></div><div style="font-family:arial,helvetica,sans-serif" class="gmail_default"><code><br></code></div>4. Extract private key and certificate<br> <div style="font-family:arial,helvetica,sans-serif;display:inline" class="gmail_default"> </div>openssl pkcs12 -in /etc/pki/ovirt-engine/keys/apache.p12 -nocerts -nodes > /etc/pki/ovirt-engine/keys/apache.key.nopass<br><div style="font-family:arial,helvetica,sans-serif;display:inline" class="gmail_default"> </div>openssl pkcs12 -in /etc/pki/ovirt-engine/keys/apache.p12 -nokeys > /etc/pki/ovirt-engine/certs/apache.cer<br><br><div style="font-family:arial,helvetica,sans-serif" class="gmail_default">5. Restart Apache<br> service httpd restart<br><br>6. Create a new trust store configuration file.<br> vi /etc/ovirt-engine/engine.conf.d/99-custom-truststore.conf<br><br> Add the following content and save the file.<br><br> ENGINE_HTTPS_PKI_TRUST_STORE="/etc/pki/java/cacerts"<br> ENGINE_HTTPS_PKI_TRUST_STORE_PASSWORD=""<br><br>7. Restart the ovirt-engine service.<br> systemctl restart ovirt-engine.service</div><br><br><div class="gmail_default" style="font-family:arial,helvetica,sans-serif">Steps 1., 6. and 7. are new to 4.0, other steps are same as in oVirt 3.x</div><br><div class="gmail_default" style="font-family:arial,helvetica,sans-serif">Also it's expected that CA certificate (including whole CA chain) is properly installed in all clients that access oVirt using HTTP and/or Spice.</div><br><div class="gmail_default" style="font-family:arial,helvetica,sans-serif">Martin Perina</div><br><br> <br><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Oct 27, 2016 at 10:38 PM, Kenneth Bingham <span dir="ltr"><<a target="_blank" href="mailto:w@qrk.us">w@qrk.us</a>></span> wrote:<br><blockquote style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex" class="gmail_quote"><div dir="ltr"><div class="gmail-m_-594478028564423228gmail_msg" dir="ltr">That makes sense, but it is also disappointing to realize that oVirt Manager will only trust certificates that itself has issued, and that there is no support for Manager to trust VDSM server certificates issued by another authority.<div class="gmail-m_-594478028564423228gmail_msg"><br class="gmail-m_-594478028564423228gmail_msg"></div><div class="gmail-m_-594478028564423228gmail_msg">If I understand you correctly, then the *only* way to install a VDSM host certificate is by registering with Manager at which time a certificate is automatically issued and installed by Manager's built-in certificate authority.</div><div class="gmail-m_-594478028564423228gmail_msg"><br class="gmail-m_-594478028564423228gmail_msg"></div></div><br class="gmail-m_-594478028564423228gmail_msg"><div class="gmail_quote gmail-m_-594478028564423228gmail_msg"><div class="gmail-m_-594478028564423228gmail_msg" dir="ltr">On Thu, Oct 27, 2016 at 3:27 PM Ravi Nori <<a target="_blank" class="gmail-m_-594478028564423228gmail_msg" href="mailto:rnori@redhat.com">rnori@redhat.com</a>> wrote:<br class="gmail-m_-594478028564423228gmail_msg"></div><blockquote style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex" class="gmail_quote gmail-m_-594478028564423228gmail_msg"><div class="gmail-m_-594478028564423228gmail_msg" dir="ltr"><div class="gmail-m_-594478028564423228gmail_msg">Since you replace ca.pem you need to replace the private key of ca.pem<br class="gmail-m_-594478028564423228gmail_msg"><br class="gmail-m_-594478028564423228gmail_msg"></div>Please copy the private key of /etc/pki/ovirt-engine/ca.pem to /etc/pki/ovirt-engine/private/<wbr>ca.pem and let me know if everything works<br class="gmail-m_-594478028564423228gmail_msg"></div><div class="gmail_extra gmail-m_-594478028564423228gmail_msg"><br class="gmail-m_-594478028564423228gmail_msg"><div class="gmail_quote gmail-m_-594478028564423228gmail_msg">On Thu, Oct 27, 2016 at 2:47 PM, Kenneth Bingham <span class="gmail-m_-594478028564423228gmail_msg" dir="ltr"><<a target="_blank" class="gmail-m_-594478028564423228gmail_msg" href="mailto:w@qrk.us">w@qrk.us</a>></span> wrote:<br class="gmail-m_-594478028564423228gmail_msg"><blockquote style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex" class="gmail_quote gmail-m_-594478028564423228gmail_msg"><div class="gmail-m_-594478028564423228gmail_msg" dir="ltr"><br class="gmail-m_-594478028564423228gmail_msg"><div class="gmail-m_-594478028564423228gmail_msg">Thanks Ravi, that's helpful and I appreciate the precision and attention to detail. I performed similar steps to install a custom certificate for the oVirt Manager GUI. But what about configuring ovirt-engine to trust a certificate issued by the same CA and presented by the VDSM host? On the hypervisor host, I used the existing private key to generate the CSR, issued the server certificate, and installed in three locations before bouncing vdsmd.</div><div class="gmail-m_-594478028564423228gmail_msg"><br class="gmail-m_-594478028564423228gmail_msg"></div><div class="gmail-m_-594478028564423228gmail_msg">On the hypervisor Host server (not the Manager/engine server):</div><div class="gmail-m_-594478028564423228gmail_msg">/etc/pki/vdsm/certs/vdsmcert.<wbr>pem</div><div class="gmail-m_-594478028564423228gmail_msg">/etc/pki/vdsm/libvirt-spice/<wbr>server-cert.pem</div><div class="gmail-m_-594478028564423228gmail_msg">/etc/pki/libvirt/clientcert.<wbr>pem</div><div class="gmail-m_-594478028564423228gmail_msg"><br class="gmail-m_-594478028564423228gmail_msg"></div><div class="gmail-m_-594478028564423228gmail_msg">Now, that host is "non responsive" in Manager because ovirt-engine does not trust the new certificate even though I already performed all of the steps that you describe above except that I installed the issuer's CA certificate as the trusted entity. I've documented all of the steps I took <a target="_blank" class="gmail-m_-594478028564423228gmail_msg" href="https://gist.github.com/qrkourier/9c9ac3e8b190dcb91d3767179d5a39ea">in this Gist</a>.</div><div class="gmail-m_-594478028564423228gmail_msg"><br class="gmail-m_-594478028564423228gmail_msg"></div><div class="gmail-m_-594478028564423228gmail_msg"><br class="gmail-m_-594478028564423228gmail_msg"></div></div><div class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777HOEnZb gmail-m_-594478028564423228gmail_msg"><div class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777h5 gmail-m_-594478028564423228gmail_msg"><br class="gmail-m_-594478028564423228gmail_msg"><div class="gmail_quote gmail-m_-594478028564423228gmail_msg"><div class="gmail-m_-594478028564423228gmail_msg" dir="ltr">On Thu, Oct 27, 2016 at 2:12 PM Ravi Nori <<a target="_blank" class="gmail-m_-594478028564423228gmail_msg" href="mailto:rnori@redhat.com">rnori@redhat.com</a>> wrote:<br class="gmail-m_-594478028564423228gmail_msg"></div><blockquote style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex" class="gmail_quote gmail-m_-594478028564423228gmail_msg"><div class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg" dir="ltr"><div class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">Here is a complete set of instructions that works for me<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg"><br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg"></div><div class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">You can skip the first few steps of generating the certificate.<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg"></div><div class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg"><br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg"></div>Ravi<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg"><div class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg"><br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg"><br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">Generate a self-signed certificate using openssl<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">==============================<wbr>========<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">openssl req -x509 -sha256 -nodes -days 365 -newkey rsa:2048 -keyout privateKey.key -out certificate.pem<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg"><br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">Convert a PEM certificate file and a private key to PKCS#12 (.p12)<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">==============================<wbr>=======================<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">openssl pkcs12 -export -out certificate.p12 -inkey privateKey.key -in certificate.pem<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg"><br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">Extract the key from the bundle <br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">=========================<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">openssl pkcs12 -in certificate.p12 -nocerts -nodes > apache.key.nopass<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg"><br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">Extract the certificate from the bundle<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">==============================<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">openssl pkcs12 -in certificate.p12 -nokeys > apache.cer<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg"><br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">Create a new Keystore for testing<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">==========================<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">keytool -keystore clientkeystore -genkey -alias client<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg"><br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">Convert .pem to .der<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">================<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">openssl x509 -outform der -in certificate.pem -out certificate.der<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg"><br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">Import certificates to keystore<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">=======================<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">keytool -import -alias apache -keystore ./clientkeystore -file ./certificate.der<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg"><br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">Create Custom conf for ovirt<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">======================<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">vi /etc/ovirt-engine/engine.conf.<wbr>d/99-custom-truststore.conf<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg"><br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">Set location of truststore and its password<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">==============================<wbr>===<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">ENGINE_HTTPS_PKI_TRUST_STORE="<wbr>/home/rnori/Downloads/Cert/<wbr>clientkeystore"<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">ENGINE_HTTPS_PKI_TRUST_STORE_<wbr>PASSWORD="123456"<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg"><br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">Copy the custom certificates<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">======================<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">rm /etc/pki/ovirt-engine/apache-<wbr>ca.pem<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">cp certificate.pem /etc/pki/ovirt-engine/apache-<wbr>ca.pem<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">cp certificate.p12 /etc/pki/ovirt-engine/keys/<wbr>apache.p12<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">cp apache.cer /etc/pki/ovirt-engine/certs/<wbr>apache.cer<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">cp apache.key.nopass /etc/pki/ovirt-engine/keys/<wbr>apache.key.nopass<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg"><br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">Restart engine and httpd<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">===================<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">service httpd restart<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">service ovirt-engine restart<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg"></div></div><div class="gmail_extra gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg"><br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg"><div class="gmail_quote gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">On Thu, Oct 27, 2016 at 5:30 AM, Nicolas Ecarnot <span class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg" dir="ltr"><<a target="_blank" class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg" href="mailto:nicolas@ecarnot.net">nicolas@ecarnot.net</a>></span> wrote:<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg"><blockquote style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex" class="gmail_quote gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg"><span class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">Le 27/10/2016 à 00:14, Kenneth Bingham a écrit :<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
<blockquote style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex" class="gmail_quote gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
I did install a server certificate from a private CA on the engine<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
server for the oVirt 4 Manager GUI, but haven't figured out how to<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
configure engine to trust the same CA which also issued the server<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
certificate presented by vdsm. This is important for us because this is<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
the same server certificate presented by the host when using the console<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
(e.g. websocket console falls silently if the user agent doesn't trust<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
the console server's certificate).<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
</blockquote>
<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg"></span>
Hello,<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
Maybe related bug : on an oVirt 4, I followed the same procedure below to install a custom CA, with *SUCCESS*.<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
Today, I had to reinstall one of the hosts, and it is failing with :<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
"CA certificate and CA private key do not match" :<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
<a target="_blank" class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg" rel="noreferrer" href="http://pastebin.com/9JS05JtJ">http://pastebin.com/9JS05JtJ</a><br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
Which certificate did we (Kenneth and I) did we mis-used?<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
What did we do wrong?<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
Regards,<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
Nicolas ECARNOT<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
<blockquote style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex" class="gmail_quote gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg"><span class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
On Wed, Oct 26, 2016, 16:58 Beckman, Daniel<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
<<a target="_blank" class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg" href="mailto:Daniel.Beckman@ingramcontent.com">Daniel.Beckman@ingramcontent.<wbr>com</a><br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg"></span><span class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
<mailto:<a target="_blank" class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg" href="mailto:Daniel.Beckman@ingramcontent.com">Daniel.Beckman@<wbr>ingramcontent.com</a>>> wrote:<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
We have oVirt 3.6.7 and I am preparing to upgrade to 4.0.4 release.<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
I read the release notes (<a target="_blank" class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg" rel="noreferrer" href="https://www.ovirt.org/release/4.0.4/">https://www.ovirt.org/<wbr>release/4.0.4/</a>) and<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg"></span>
noted comment #4 under “Install / Upgrade from previous version”:____<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
__ __<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
/If you are using HTTPS certificate signed by custom certificate<span class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg"><br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
authority, please take a look at <a target="_blank" class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg" rel="noreferrer" href="https://bugzilla.redhat.com/1336838">https://bugzilla.redhat.com/<wbr>1336838</a><br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
for steps which need to be done after migration to 4.0. Also please<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
consult <a target="_blank" class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg" rel="noreferrer" href="https://bugzilla.redhat.com/1313379">https://bugzilla.redhat.com/<wbr>1313379</a> how to setup this custom<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg"></span>
CA for use with virt-viewer clients.____/<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
/__ __/<span class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg"><br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
So I referred to the first bugzilla<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
(<a target="_blank" class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg" rel="noreferrer" href="https://bugzilla.redhat.com/show_bug.cgi?id=1336838">https://bugzilla.redhat.com/<wbr>show_bug.cgi?id=1336838</a>), where it<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg"></span>
states as follows:____<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
__ __<span class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg"><br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
If customer wants to use custom HTTPS certificate signed by<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg"></span>
different CA, then he has to perform following steps: ____<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
__ __<span class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg"><br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
1. Install custom CA (that signed HTTPS certificate) into host wide<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg"></span>
trustore (more info can be found in update-ca-trust man page) ____<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
__ __<span class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg"><br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
2. Configure HTTPS certificate in Apache (this step is same as in<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg"></span>
previous versions) ____<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
__ __<span class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg"><br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
3. Create new configuration file (for example<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
/etc/ovirt-engine/engine.conf.<wbr>d/99-custom-truststore.conf) with<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg"></span>
following content: ____<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
ENGINE_HTTPS_PKI_TRUST_STORE="<wbr>/etc/pki/java/cacerts"<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
ENGINE_HTTPS_PKI_TRUST_STORE_<wbr>PASSWORD="" ____<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
__ __<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
4. Restart ovirt-engine service____<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
__ __<span class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg"><br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
I find it humorous that step # 1 suggests reading the “man page”<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg"></span>
which is only slightly better than suggesting to “google” it. ____<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
__ __<span class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg"><br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
Has anyone using a custom CA for their HTTPS certificate<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
successfully upgraded to oVirt 4? If so could you share your<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
detailed steps? Or can anyone point me to an actual example of this<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
procedure? I’m a little nervous about the upgrade if you can’t<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg"></span>
already tell. ____<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
__ __<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
Thanks,____<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
Daniel____<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
______________________________<wbr>_________________<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
Users mailing list<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
<a target="_blank" class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg" href="mailto:Users@ovirt.org">Users@ovirt.org</a> <mailto:<a target="_blank" class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg" href="mailto:Users@ovirt.org">Users@ovirt.org</a>><br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
<a target="_blank" class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg" rel="noreferrer" href="http://lists.ovirt.org/mailman/listinfo/users">http://lists.ovirt.org/<wbr>mailman/listinfo/users</a><span class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg"><br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
______________________________<wbr>_________________<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
Users mailing list<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
<a target="_blank" class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg" href="mailto:Users@ovirt.org">Users@ovirt.org</a><br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
<a target="_blank" class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg" rel="noreferrer" href="http://lists.ovirt.org/mailman/listinfo/users">http://lists.ovirt.org/<wbr>mailman/listinfo/users</a><br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
</span></blockquote><span class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940m_-4789423380628271279HOEnZb gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg"><font class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg" color="#888888">
<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg"><span class="gmail-HOEnZb"><font color="#888888">
<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
-- <br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
Nicolas ECARNOT</font></span></font></span><span class="gmail-HOEnZb"><font color="#888888"><div class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940m_-4789423380628271279HOEnZb gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg"><div class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940m_-4789423380628271279h5 gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg"><br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
______________________________<wbr>_________________<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
Users mailing list<br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
<a target="_blank" class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg" href="mailto:Users@ovirt.org">Users@ovirt.org</a><br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
<a target="_blank" class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg" rel="noreferrer" href="http://lists.ovirt.org/mailman/listinfo/users">http://lists.ovirt.org/<wbr>mailman/listinfo/users</a><br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg">
</div></div></font></span></blockquote></div><span class="gmail-HOEnZb"><font color="#888888"><br class="gmail-m_-594478028564423228m_7440200668888794961m_2611409000370850777m_-980879755636344940gmail_msg gmail-m_-594478028564423228gmail_msg"></font></span></div><span class="gmail-HOEnZb"><font color="#888888">
</font></span></blockquote></div><span class="gmail-HOEnZb"><font color="#888888">
</font></span></div></div></blockquote></div><span class="gmail-HOEnZb"><font color="#888888"><br class="gmail-m_-594478028564423228gmail_msg"></font></span></div>
</blockquote></div></div>
<br>______________________________<wbr>_________________<br>
Users mailing list<br>
<a href="mailto:Users@ovirt.org">Users@ovirt.org</a><br>
<a target="_blank" rel="noreferrer" href="http://lists.ovirt.org/mailman/listinfo/users">http://lists.ovirt.org/<wbr>mailman/listinfo/users</a><br>
<br></blockquote></div><br></div></div>