moVirt : Can't connect (wrong format for DER error)

Hello, When trying to connect using moVirt, I get : org.apache.harmony.security.asn1.ASN1Exception: ASN.1 UTCTime: wrong format for DER We're using oVirt 3.4.1, and happily using ovirt-shell with a .ovirtshellrc that contains some kind of settings that helped me to ensure I was doing right in moVirt settings. We are not using a specific certificate, we're still using the out-of-the-box certificate of the installation. What can I check on this Android phone or on the oVirt engine? Thank you. -- Nicolas Ecarnot

Hi, it seems that something is wrong with the certificate you are using (e.g. the CA not imported to your device or not imported properly). You could try just to check the "disable https" checkbox (it disables the certificate checking, just for testing purposes). If it will work, we can try to import your actual CA cert. Tomas ----- Original Message -----
From: "Nicolas Ecarnot" <nicolas@ecarnot.net> To: users@ovirt.org Sent: Wednesday, March 11, 2015 6:07:58 PM Subject: [ovirt-users] moVirt : Can't connect (wrong format for DER error)
Hello,
When trying to connect using moVirt, I get :
org.apache.harmony.security.asn1.ASN1Exception: ASN.1 UTCTime: wrong format for DER
We're using oVirt 3.4.1, and happily using ovirt-shell with a .ovirtshellrc that contains some kind of settings that helped me to ensure I was doing right in moVirt settings.
We are not using a specific certificate, we're still using the out-of-the-box certificate of the installation.
What can I check on this Android phone or on the oVirt engine?
Thank you.
-- Nicolas Ecarnot _______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users

Le 12/03/2015 08:36, Tomas Jelinek a écrit :
Hi,
it seems that something is wrong with the certificate you are using (e.g. the CA not imported to your device or not imported properly).
You could try just to check the "disable https" checkbox (it disables the certificate checking, just for testing purposes).
Tomas, Oops, I forgot to say that I already tried every combination of the three checkboxes with no success. Does that mean I'm stuck? Is there somewhere in the engine logs I could see useful messages? -- Nicolas Ecarnot

----- Original Message -----
From: "Nicolas Ecarnot" <nicolas@ecarnot.net> To: "Tomas Jelinek" <tjelinek@redhat.com> Cc: users@ovirt.org Sent: Thursday, March 12, 2015 9:20:55 AM Subject: Re: [ovirt-users] moVirt : Can't connect (wrong format for DER error)
Le 12/03/2015 08:36, Tomas Jelinek a écrit :
Hi,
it seems that something is wrong with the certificate you are using (e.g. the CA not imported to your device or not imported properly).
You could try just to check the "disable https" checkbox (it disables the certificate checking, just for testing purposes).
Tomas,
Oops, I forgot to say that I already tried every combination of the three checkboxes with no success.
Does that mean I'm stuck?
not yet :)
Is there somewhere in the engine logs I could see useful messages?
I don't think it is engine side of the story... Could you please try on your mobile open some web browser and type the same URL you use in moVirt? Does that return the same message? Also, have you tried to import the certificate or not yet?
-- Nicolas Ecarnot

Le 12/03/2015 09:58, Tomas Jelinek a écrit :
Does that mean I'm stuck?
not yet :)
Where there's a will, there's a way :)
Is there somewhere in the engine logs I could see useful messages?
I don't think it is engine side of the story... Could you please try on your mobile open some web browser and type the same URL you use in moVirt? Does that return the same message?
Good point. In chrome, when typing this same URL, I get the usual message telling me the page has a certificate issue (NET::ERR_CERT_INVALID). But at the contrary as usually, I have no link to bypass this warning and no way to approve any certificate. I guess I won't bother you any more and do my homework about the generation of a clean certificate setup on the engine side. Once it's OK, I'll try to play with moVirt and tell you.
Also, have you tried to import the certificate or not yet?
-- Nicolas Ecarnot
-- Nicolas Ecarnot
participants (2)
-
Nicolas Ecarnot
-
Tomas Jelinek