Hi,
       check the permissions and ownership of the certificate and key files, they are usually linked to apache.cer and apache.key.nopass.

you can check your configuration at

/etc/ovirt-engine/ovirt-websocket-proxy.conf.d/10-setup.conf

They should be owned by ovirt:ovirt


Regards.

Paul S.

From: vegard.saeten--- via Users <users@ovirt.org>
Sent: 13 October 2021 17:46
To: users@ovirt.org <users@ovirt.org>
Subject: [ovirt-users] Disconnected from Console. Cannot connect to websocket proxy server.
 
Caution External Mail: Do not click any links or open any attachments unless you trust the sender and know that the content is safe.

Hi.
After renewing our certificate, our users cannot connect to their virtual machines using the VNC Console (browser) option.

They receive this error message:
Disconnected from Console. Cannot connect to websocket proxy server. Please check your websocket proxy certificate or ask your administrator for help. For further information please refer to the console manual.
Press the 'Connect' button to reconnect the console.


This is what is showing in the logs on the engine server:

sudo service ovirt-websocket-proxy status -l
Redirecting to /bin/systemctl status  -l ovirt-websocket-proxy.service
● ovirt-websocket-proxy.service - oVirt Engine websockets proxy
   Loaded: loaded (/usr/lib/systemd/system/ovirt-websocket-proxy.service; enabled; vendor preset: disabled)
   Active: active (running) since Tue 2021-10-12 15:32:04 CEST; 1 day 3h ago
 Main PID: 49597 (ovirt-websocket)
   CGroup: /system.slice/ovirt-websocket-proxy.service
           └─49597 /usr/bin/python /usr/share/ovirt-engine/services/ovirt-websocket-proxy/ovirt-websocket-proxy.py --systemd=notify start

Oct 13 18:27:51 enginedomain ovirt-websocket[52044]: 2021-10-13 18:27:51,338+0200 ovirt-websocket-proxy: INFO msg:887 handler exception: [Errno 13] Permission denied
Oct 13 18:27:51 enginedomain ovirt-websocket-proxy.py[49597]: ovirt-websocket-proxy[52044] INFO msg:887 handler exception: [Errno 13] Permission denied
Oct 13 18:31:54 enginedomain ovirt-websocket[53293]: 2021-10-13 18:31:54,516+0200 ovirt-websocket-proxy: INFO msg:887 handler exception: [Errno 13] Permission denied
Oct 13 18:31:54 enginedomain ovirt-websocket-proxy.py[49597]: ovirt-websocket-proxy[53293] INFO msg:887 handler exception: [Errno 13] Permission denied
Oct 13 18:31:59 enginedomain ovirt-websocket[53300]: 2021-10-13 18:31:59,270+0200 ovirt-websocket-proxy: INFO msg:887 handler exception: [Errno 13] Permission denied
Oct 13 18:31:59 enginedomain ovirt-websocket-proxy.py[49597]: ovirt-websocket-proxy[53300] INFO msg:887 handler exception: [Errno 13] Permission denied
Oct 13 18:32:00 enginedomain ovirt-websocket[53301]: 2021-10-13 18:32:00,028+0200 ovirt-websocket-proxy: INFO msg:887 handler exception: [Errno 13] Permission denied
Oct 13 18:32:00 enginedomain ovirt-websocket-proxy.py[49597]: ovirt-websocket-proxy[53301] INFO msg:887 handler exception: [Errno 13] Permission denied
Oct 13 18:34:45 enginedomain ovirt-websocket[53341]: 2021-10-13 18:34:45,099+0200 ovirt-websocket-proxy: INFO msg:887 handler exception: [Errno 13] Permission denied
Oct 13 18:34:45 enginedomain ovirt-websocket-proxy.py[49597]: ovirt-websocket-proxy[53341] INFO msg:887 handler exception: [Errno 13] Permission denied

Any suggestions on how we can fix this issue?
_______________________________________________
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-leave@ovirt.org
Privacy Statement: https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ovirt.org%2Fprivacy-policy.html&amp;data=04%7C01%7Cp.staniforth%40leedsbeckett.ac.uk%7C35f156a0595e48267c2508d98fbf0666%7Cd79a81124fbe417aa112cd0fb490d85c%7C0%7C0%7C637698872884901783%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&amp;sdata=3%2FUDDly%2B2eyfhqXu7w%2B1kZW9i2ude4t0JdKgkRxRzNo%3D&amp;reserved=0
oVirt Code of Conduct: https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ovirt.org%2Fcommunity%2Fabout%2Fcommunity-guidelines%2F&amp;data=04%7C01%7Cp.staniforth%40leedsbeckett.ac.uk%7C35f156a0595e48267c2508d98fbf0666%7Cd79a81124fbe417aa112cd0fb490d85c%7C0%7C0%7C637698872884901783%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&amp;sdata=CvHLlb7wEbbQmvlI5hlkABs5%2BUSXNwXtBXrLnu3cCHg%3D&amp;reserved=0
List Archives: https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.ovirt.org%2Farchives%2Flist%2Fusers%40ovirt.org%2Fmessage%2F7UQMWATP4X7QUWXBWEKTMZL75QU55IUB%2F&amp;data=04%7C01%7Cp.staniforth%40leedsbeckett.ac.uk%7C35f156a0595e48267c2508d98fbf0666%7Cd79a81124fbe417aa112cd0fb490d85c%7C0%7C0%7C637698872884901783%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&amp;sdata=QQrzWmIwvmi4xJge3OO0UFCL8b9iH%2BGFtV1%2Fdj6CfXw%3D&amp;reserved=0
To view the terms under which this email is distributed, please go to:-
https://leedsbeckett.ac.uk/disclaimer/email