Hi, Please make sure [1] is exist on the file system and has right permissions, btw till you resolve this, you can connect to your site in insecure mode: 1. without host being validated raising --dont-validate-cert-chain flag 2. without no-certificate error being thrown raising --insecure flag (host will be validated once [1] is available/accessible by the shell) [1] /home/leaboy/ovirt_ca/ca_cear.pem On 04/20/2013 11:37 PM, Itamar Heim wrote:

[Engine-devel] about ca-file.eml

Subject: [Engine-devel] about ca-file From: "wanglibo" <wanglibo@tongfangcloud.com> Date: Mon, 8 Apr 2013 18:02:37 +0800

To: <engine-devel@ovirt.org>

Hi,all:

I’m in troubling with ca-file, who can tell me which the direction assigned to CA_FILE

On the webpage http://www.ovirt.org/How_to_Connect_to_SPICE_Console_Without_Portal

saided from the web: |wget -O ${CA_FILE}| |*http://${OVIRT}/ca.crt* <http://%24%7Bovirt%7D/ca.crt>|

When I use overt-shell, I get ca.pem like this :

[leaboy@Leaboy ovirt_ca]$ pwd

/home/leaboy/ovirt_ca

[leaboy@Leaboy ovirt_ca]$ wget -o ca-cert.pem http://192.168.1.181/ca.pem

[leaboy@Leaboy ovirt_ca]$ ls

ca-cert.pem

[leaboy@Leaboy ovirt_ca]$

And then, I launched overt-shell and connect to overt-engine like this:

++++++++++++++++++++++++++++++++++++++++++

Welcome to oVirt shell

++++++++++++++++++++++++++++++++++++++++++

[oVirt shell (disconnected)]# *connect --url https://192.168.1.181 --user admin@internal --password 111111 --ca-file /home/leaboy/ovirt_ca/ca_cear.pem*

error: [ERROR]::oVirt API connection failure, [Errno 185090050] _ssl.c:340: error:0B084002:x509 certificate routines:X509_load_cert_crl_file:system lib

[oVirt shell (disconnected)]#

_______________________________________________ Engine-devel mailing list Engine-devel@ovirt.org http://lists.ovirt.org/mailman/listinfo/engine-devel

-- Michael Pasternak RedHat, ENG-Virtualization R&D