Please reply to list... You should put ca.crt at /home/leaboy/.spicec/spice_truststore.pem or specify --ca-file ca.crt at spicec command-line. Alon ----- Original Message -----

From: "leaboy@126" <wlbleaboy@126.com> To: "Alon Bar-Lev" <alonbl@redhat.com> Sent: Monday, April 8, 2013 2:55:00 PM Subject: 答复: [Engine-devel] about ca-file

Thinks! Question 1 is resolved. But, when I connected, I must assigned the --ca-file /home/leaboy/overt_ca/ca.crt. How can I connect just use --url --user --password without assigned --ca-file, I mean which directory I put the ca.crt

in Question 2, when I connect vm use spicec directly , how can spicec to find the ca.crt

Leaboy Beijing Thinks to abarlev

-----邮件原件----- 发件人: abarlev@redhat.com [mailto:abarlev@redhat.com] 代表 Alon Bar-Lev 发送时间: 2013年4月8日 19:01 收件人: leaboy@126 抄送: engine-devel@ovirt.org 主题: Re: [Engine-devel] about ca-file

$ wget -o ca-cert.pem http://192.168.1.181/ca.crt

----- Original Message -----

...

From: "leaboy@126" <wlbleaboy@126.com> To: engine-devel@ovirt.org Sent: Monday, April 8, 2013 1:09:03 PM Subject: [Engine-devel] about ca-file

Question 1:

Hi,all:

I’m in troubling with ca-file, who can tell me which the direction assigned to CA_FILE

On the webpage http://www.ovirt.org/How_to_Connect_to_SPICE_Console_Without_Portal

saided from the web: wget -O ${CA_FILE} http://${OVIRT}/ca.crt

When I use overt-shell, I get ca.pem like this :

[leaboy@Leaboy ovirt_ca]$ pwd

/home/leaboy/ovirt_ca

[leaboy@Leaboy ovirt_ca]$ wget -o ca-cert.pem http://192.168.1.181/ca.pem

[leaboy@Leaboy ovirt_ca]$ ls

ca-cert.pem

[leaboy@Leaboy ovirt_ca]$

And then, I launched overt-shell and connect to overt-engine like this:

++++++++++++++++++++++++++++++++++++++++++

Welcome to oVirt shell

++++++++++++++++++++++++++++++++++++++++++

[oVirt shell (disconnected)]# connect --url https://192.168.1.181 --user admin@internal --password 111111 --ca-file /home/leaboy/ovirt_ca/ca_cear.pem

error: [ERROR]::oVirt API connection failure, [Errno 185090050] _ssl.c:340: error:0B084002:x509 certificate routines:X509_load_cert_crl_file:system lib

[oVirt shell (disconnected)]#

Questioin 2:

When I connect the vm use spicec , get a error message like this:

leaboy@leaboy:~/.spicec$ spicec -h 192.168.1.219 -p 5900 -s 5901

Error: SSL_CTX_load_verify_locations failed CA_file=/home/leaboy/.spicec/spice_truststore.pem

Warning: SSL Error:

leaboy@leaboy:~/.spicec$

_______________________________________________ Engine-devel mailing list Engine-devel@ovirt.org http://lists.ovirt.org/mailman/listinfo/engine-devel