From: "leaboy@126" <wlbleaboy(a)126.com&gt; To: "Alon Bar-Lev" <alonbl(a)redhat.com&gt; Sent: Monday, April 8, 2013 2:55:00 PM Subject: 答复: [Engine-devel] about ca-file Thinks! Question 1 is resolved. But, when I connected, I must assigned the --ca-file /home/leaboy/overt_ca/ca.crt. How can I connect just use --url --user --password without assigned --ca-file, I mean which directory I put the ca.crt in Question 2, when I connect vm use spicec directly , how can spicec to find the ca.crt Leaboy Beijing Thinks to abarlev -----邮件原件----- 发件人: abarlev(a)redhat.com [mailto:abarlev@redhat.com] 代表 Alon Bar-Lev 发送时间: 2013年4月8日 19:01 收件人: leaboy@126 抄送: engine-devel(a)ovirt.org 主题: Re: [Engine-devel] about ca-file $ wget -o ca-cert.pem http://192.168.1.181/ca.crt ----- Original Message ----- > From: "leaboy@126" <wlbleaboy(a)126.com&gt; > To: engine-devel(a)ovirt.org > Sent: Monday, April 8, 2013 1:09:03 PM > Subject: [Engine-devel] about ca-file > > > > Question 1: > > Hi,all: > > I’m in troubling with ca-file, who can tell me which the direction assigned > to CA_FILE > > On the webpage > http://www.ovirt.org/How_to_Connect_to_SPICE_Console_Without_Portal > > saided from the web: wget -O ${CA_FILE} http://${OVIRT}/ca.crt > > When I use overt-shell, I get ca.pem like this : > > > > [leaboy@Leaboy ovirt_ca]$ pwd > > /home/leaboy/ovirt_ca > > [leaboy@Leaboy ovirt_ca]$ wget -o ca-cert.pem http://192.168.1.181/ca.pem > > [leaboy@Leaboy ovirt_ca]$ ls > > ca-cert.pem > > [leaboy@Leaboy ovirt_ca]$ > > > > And then, I launched overt-shell and connect to overt-engine like this: > > > > ++++++++++++++++++++++++++++++++++++++++++ > > > > Welcome to oVirt shell > > > > ++++++++++++++++++++++++++++++++++++++++++ > > > > > > [oVirt shell (disconnected)]# connect --url https://192.168.1.181 --user > admin@internal --password 111111 --ca-file > /home/leaboy/ovirt_ca/ca_cear.pem > > > > > > error: [ERROR]::oVirt API connection failure, [Errno 185090050] _ssl.c:340: > error:0B084002:x509 certificate routines:X509_load_cert_crl_file:system lib > > > > > > [oVirt shell (disconnected)]# > > > > Questioin 2: > > When I connect the vm use spicec , get a error message like this: > > leaboy@leaboy:~/.spicec$ spicec -h 192.168.1.219 -p 5900 -s 5901 > > Error: SSL_CTX_load_verify_locations failed > CA_file=/home/leaboy/.spicec/spice_truststore.pem > > Warning: SSL Error: > > leaboy@leaboy:~/.spicec$ > > _______________________________________________ > Engine-devel mailing list > Engine-devel(a)ovirt.org > http://lists.ovirt.org/mailman/listinfo/engine-devel >