[ovirt-users] Re: ovirt-websocket-proxy errors when trying noVNC

On May 28, 2020, at 7:23 AM, Jayme <jaymef(a)gmail.com&gt; wrote: If it’s the issue I’m thinking of it’s because Apple Mojave started rejecting carts that have a validity date shorter than a certain period of time which ovirt ca does not follow. I posted another message on this group about it a little while ago and I think a bug report was made. The only way I can get novnc to work in Mac is by using Firefox and making sure the ca is imported and trusted by Firefox. I cannot get it to work with safari or chrome. On Thu, May 28, 2020 at 8:08 AM Louis Bohm <louisbohm(a)gmail.com <mailto:louisbohm@gmail.com>> wrote: So as I said before I added the CA cert to my MAC (and I can see it in the MAC’s Keychain). But its still not working. For humor I will try adding the CA to my Windows VM and see if that produces a different result. Louis -<<—->>- Louis Bohm louisbohm(a)gmail.com <mailto:louisbohm@gmail.com> <vmware-certified-professional-6-5-data-center-virtualization.1.png> <https://www.youracclaim.com/badges/f11e0d65-21ad-4458-895b-2c5b5cb11134/p... <https://www.youracclaim.com/badges/f11e0d65-21ad-4458-895b-2c5b5cb11134/p... > On May 27, 2020, at 11:01 AM, Scott Dickerson <sdickers(a)redhat.com <mailto:sdickers@redhat.com>> wrote: > > > On Wed, May 27, 2020 at 7:42 AM Louis Bohm <louisbohm(a)gmail.com <mailto:louisbohm@gmail.com>> wrote: > OS: Oracle Linux 7.8 (unbreakable kernel) > Using Oracle Linux Virtualization Manager: Software Version:4.3.6.6-1.0.9.el7 > > Since I am running all of it on one physical machine I opted to install the ovirt-engine using the accept defaults option. > > When I try to start a noVNC console I see this in the messages file: > May 26 16:49:12 lfg-kvm saslpasswd2: Could not find keytab file: /etc/qemu/krb5.tab: No such file or directory > May 26 16:49:12 lfg-kvm saslpasswd2: error deleting entry from sasldb: BDB0073 DB_NOTFOUND: No matching key/data pair found > May 26 16:49:12 lfg-kvm saslpasswd2: error deleting entry from sasldb: BDB0073 DB_NOTFOUND: No matching key/data pair found > May 26 16:49:12 lfg-kvm saslpasswd2: error deleting entry from sasldb: BDB0073 DB_NOTFOUND: No matching key/data pair found > May 26 16:49:12 lfg-kvm saslpasswd2: error deleting entry from sasldb: BDB0073 DB_NOTFOUND: No matching key/data pair found > May 26 16:49:14 lfg-kvm journal: 2020-05-26 16:49:14,704-0400 ovirt-websocket-proxy: INFO msg:824 handler exception: [SSL: SSLV3_ALERT_CERTIFICATE_UNKNOWN] sslv3 alert certificate unknown (_ssl.c:618) > May 26 16:49:14 lfg-kvm ovirt-websocket-proxy.py: ovirt-websocket-proxy[14582] INFO msg:824 handler exception: [SSL: SSLV3_ALERT_CERTIFICATE_UNKNOWN] sslv3 alert certificate unknown (_ssl.c:618) > > I have checked the following: > [root@lfg-kvm ~]# engine-config -g WebSocketProxy > WebSocketProxy: lfg-kvm.corp.lfg.com:6100 <http://lfg-kvm.corp.lfg.com:6100/> version: general > [root@lfg-kvm ~]# engine-config -g SpiceProxyDefault > SpiceProxyDefault: http://lfg-kvm.corp.lfg.com:6100 <http://lfg-kvm.corp.lfg.com:6100/> version: general > > This is a brand new install. > > I also am unable to get a VNC console up and running. I have tried with an Ubuntu VM running on my MAC where I installed virt-manager. The viewer comes up for a second says it cannot connect and then shutsdown. > > > If you're only using noVNC, then you need to make sure you import the CA Cert and trust it in your browser. There is no way to interactively accept the self-signed cert from the engine when noVNC connects via the websocket proxy. > > Anyone have any clue? > -<<—->>- > Louis Bohm > louisbohm(a)gmail.com <mailto:louisbohm@gmail.com> > <https://www.youracclaim.com/badges/f11e0d65-21ad-4458-895b-2c5b5cb11134/p... <https://www.youracclaim.com/badges/f11e0d65-21ad-4458-895b-2c5b5cb11134/p... > _______________________________________________ > Users mailing list -- users(a)ovirt.org <mailto:users@ovirt.org> > To unsubscribe send an email to users-leave(a)ovirt.org <mailto:users-leave@ovirt.org> > Privacy Statement: https://www.ovirt.org/privacy-policy.html <https://www.ovirt.org/privacy-policy.html> > oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ <https://www.ovirt.org/community/about/community-guidelines/> > List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/U66GSTI4QJS... <https://lists.ovirt.org/archives/list/users@ovirt.org/message/U66GSTI4QJS... > > > -- > Scott Dickerson > Senior Software Engineer > RHV-M Engineering - UX Team > Red Hat, Inc _______________________________________________ Users mailing list -- users(a)ovirt.org <mailto:users@ovirt.org> To unsubscribe send an email to users-leave(a)ovirt.org <mailto:users-leave@ovirt.org> Privacy Statement: https://www.ovirt.org/privacy-policy.html <https://www.ovirt.org/privacy-policy.html> oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ <https://www.ovirt.org/community/about/community-guidelines/> List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/WLZEDVEV5E4... <https://lists.ovirt.org/archives/list/users@ovirt.org/message/WLZEDVEV5E4...