1:08 a.m.
On Fri, Dec 13, 2013 at 5:57 PM, Alon Bar-Lev wrote:
>
>
> Under /etc/pki/ovirt-engine/keys I only have these files:
> [root@tekkaman keys]# ll
> total 16
> -rw-r-----. 1 apache apache 1828 Feb 10 2013 apache.key.nopass
> -rw-r-----. 1 apache apache 2677 Feb 10 2013 apache.p12
> -rw-------. 1 root root 1828 Feb 10 2013 engine_id_rsa
> -rw-r-----. 1 ovirt ovirt 2677 Feb 10 2013 engine.p12
>
> and for certs:
>
> [root@tekkaman old_logs]# ll /etc/pki/ovirt-engine/certs/
> total 60
> -rw-r--r--. 1 root root 4810 Feb 10 2013 01.pem
> -rw-r--r--. 1 root root 4957 Feb 10 2013 02.pem
> -rw-r--r--. 1 root root 4957 Feb 10 2013 03.pem
> -rw-r--r--. 1 ovirt ovirt 4931 Feb 10 2013 04.pem
> -rw-r-----. 1 apache apache 4957 Feb 10 2013 apache.cer
> -rw-r--r--. 1 root root 1480 Feb 10 2013 ca.der
> -rw-r--r--. 1 root root 4957 Feb 10 2013 engine.cer
> -rw-r--r--. 1 ovirt ovirt 4931 Feb 10 2013
> tekkaman.localdomain.localcert.pem
>
> Can I directly proceed with step 2 or is it a problem that I have no
> /etc/pki/ovirt-engine/keys/websocket-proxy.p12 in place at the moment?
Yes, after running setup you should notice these.
Wow, finally!
I got it at the end. Thanks!
I verified both SpiceHTML5 and noVNC work now
[root@tekkaman ~]# ll /etc/pki/ovirt-engine/keys
total 24
-rw-r-----. 1 apache apache 1828 Feb 10 2013 apache.key.nopass
-rw-r-----. 1 apache apache 2677 Feb 10 2013 apache.p12
-rw-------. 1 root root 1828 Feb 10 2013 engine_id_rsa
-rw-r-----. 1 ovirt ovirt 2677 Feb 10 2013 engine.p12
-rw-------. 1 ovirt ovirt 1828 Dec 13 22:30 websocket-proxy.key.nopass
-rw-------. 1 root root 2669 Dec 13 22:30 websocket-proxy.p12
[root@tekkaman ~]# ll /etc/pki/ovirt-engine/certs/
total 76
-rw-r--r--. 1 root root 4810 Feb 10 2013 01.pem
-rw-r--r--. 1 root root 4957 Feb 10 2013 02.pem
-rw-r--r--. 1 root root 4957 Feb 10 2013 03.pem
-rw-r--r--. 1 ovirt ovirt 4931 Feb 10 2013 04.pem
-rw-r--r--. 1 root root 4952 Dec 13 22:30 05.pem
-rw-r-----. 1 apache apache 4957 Feb 10 2013 apache.cer
-rw-r--r--. 1 root root 1480 Feb 10 2013 ca.der
-rw-r--r--. 1 root root 4957 Feb 10 2013 engine.cer
-rw-r--r--. 1 ovirt ovirt 4931 Feb 10 2013 tekkaman.localdomain.localcert.pem
-rw-r--r--. 1 root root 4952 Dec 13 22:30 websocket-proxy.cer
But this means that what documented here, that was what I followed
some weeks ago, is incomplete:
http://www.ovirt.org/Features/noVNC_console#Setup_Websocket_Proxy_on_the_...
?
Or simply that my initial ovirt engine version didn't have this
feature at all so that websocket certificate part wasn't created on
February 2013?
BTW: initial test of my windows XP guest not usable...
see this screencast where first half is with firefox 26 and second
part with chrome 31.0.1650.63, both run from a fedora 19 client
https://drive.google.com/file/d/0BwoPbcrMv8mvLUMyOWNPVUFOSkE/edit?usp=sha...
But I'm going to do more tests with more kind of guests and eventually
post in separate thread.
Thanks again Alon and Frank
Gianluca