Hello everyone!
I am trying to analyze traffic between ovirt-engine and vdsm.
First strange thing is, that it should be encrypted by default . When I
listen in wireshark for message from engine to vdsm being on the engine
machine, the traffic is not encrypted. It is only tcp. I expect it then be
acceptable for wireshark json dissector. But this is not a json. Is this a
normal situation or I should set up encryption by myself?
However, on the guest machine, I see in wireshark that the traffic between
engine and vdsm is encrypted. ( I have a configuration of my computer as a
client and two VMs as engine and node). So , I am trying to use engine's
private key to decrypt it. The private key is not engine_id_rsa (am I
right?), but it is hidden inside .p12 file. To extract the key from this
file I need a password. During the ovirt installing I didn't set up any
password for this. Is this maybe a default one? How can I extract a private
key?
So, the final questions are:
1) Should the traffic between engine and vdsm be encrypted by default?
2) How the private key for engine can be extracted?