Re: [Users] Specifying values for cert, key, and CA for ovirt-shell

Bob Doolittle wrote: > > On 01/08/2014 02:17 PM, Joop wrote: >> Bob Doolittle wrote: >>> Hi, >>> >>> I want to run ovirt-shell directly (as root) on the Engine. >>> Presumably all the files I need for CA, key, and cert are in the >>> /etc/pki area. >>> >>> But when I use the attached .ovirtshellrc file I get: >>> >>> error: [Errno 336265218] _ssl.c:341: error:140B0002:SSL >>> routines:SSL_CTX_use_PrivateKey_file:system lib >>> >>> How can I specify an appropriate configuration to get this working? >>> I would prefer to keep using SSL if possible. >> Just guessing but I don't think that your fqdn is localhost in your >> certs. Use your fqdn for the url variable. > > Good thought. But now I am getting: > > error: [Errno 336265225] _ssl.c:341: error:140B0009:SSL > routines:SSL_CTX_use_PrivateKey_file:PEM lib > > Some searching indicates that my keys and certs need to be in pem > format, so maybe I have to convert them before use? Any tips on how > to do that? > What happens if you leave out the ca_file/key_file/cert_file variables? I just played around with ovirt-shell and made a .ovirtshellrc file, on the engine, and don't remember setting these and I could login and run scripts Can't access my test environment right now so this is also a shot in the dark.