- Devel - oVirt List Archives

[Engine-devel] ovirt-host-deploy and multible bridges
by Sahina Bose 11 Apr '13

11 Apr '13

This is a multi-part message in MIME format. --------------080204010900060200040902 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Hi all, I'm testing the bootstrapping of host without reboot on Fedora 18. After host's bootstrap, Ifconfig output returns this: ovirtmgmt: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500 inet 10.70.37.219 netmask 255.255.254.0 broadcast 10.70.37.255 <snipped> virbr0: flags=4099<UP,BROADCAST,MULTICAST> mtu 1500 inet 192.168.122.1 netmask 255.255.255.0 broadcast 192.168.122.255 <snipped> Running*glusterHostsList* vdsm verb, returns the ip address 192.168.122.1, whereas my host has been added with ip address 10.70.37.219 If I reboot the host, the virbr0 bridge is removed, and there's no issue. The vdsm verb glusterHostsList - returns ipAddress of host + output of gluster peer probe. This is needed because a periodic sync job needs to make sure that the hosts added in engine are in sync with the gluster cli (hosts could also be added/removed from gluster cli). How can we make sure glusterHostsList picks the correct ipAddress? Reading the inetinfo based on bridge has been vetoed as we are doing away with bridges. It would also work if virbr0 was updated in vds_interfaces table. Since this is not happening either - we have an issue. thanks sahina --------------080204010900060200040902 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit <html> <head> <meta http-equiv="content-type" content="text/html; charset=ISO-8859-1"> </head> <body bgcolor="#FFFFFF" text="#000000"> <pre>Hi all, I'm testing the bootstrapping of host without reboot on Fedora 18. After host's bootstrap, Ifconfig output returns this: ovirtmgmt: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500 inet 10.70.37.219 netmask 255.255.254.0 broadcast 10.70.37.255 <snipped> virbr0: flags=4099<UP,BROADCAST,MULTICAST> mtu 1500 inet 192.168.122.1 netmask 255.255.255.0 broadcast 192.168.122.255 <snipped> Running *glusterHostsList* vdsm verb, returns the ip address 192.168.122.1, whereas my host has been added with ip address 10.70.37.219 If I reboot the host, the virbr0 bridge is removed, and there's no issue. </pre> The vdsm verb glusterHostsList - returns ipAddress of host + output of gluster peer probe. This is needed because a periodic sync job needs to make sure that the hosts added in engine are in sync with the gluster cli (hosts could also be added/removed from gluster cli). How can we make sure glusterHostsList picks the correct ipAddress? Reading the inetinfo based on bridge has been vetoed as we are doing away with bridges. It would also work if virbr0 was updated in vds_interfaces table. Since this is not happening either - we have an issue. thanks sahina </body> </html> --------------080204010900060200040902--

3 11

[Engine-devel] build stuck on RunVmCommandTest
by Shireesh Anjal 10 Apr '13

10 Apr '13

This is a multi-part message in MIME format. --------------050101090103000106050901 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Hi, From last night onwards, my mvn build is getting stuck for a long time ( > 30 minutes) on RunVmCommandTest Running org.ovirt.engine.core.bll.MoveDisksCommandTest Tests run: 9, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.04 sec *Running org.ovirt.engine.core.bll.RunVmCommandTest** **Tests run: 25, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 1,983.033 sec** *Running org.ovirt.engine.core.bll.lock.InMemoryLockManagerTest Tests run: 4, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.007 sec Running org.ovirt.engine.core.bll.RemoveImageCommandTest The same issue is happening on one of my colleague's system as well. Any help in fixing this will be highly appreciated. Regards, Shireesh --------------050101090103000106050901 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit <html> <head> <meta http-equiv="content-type" content="text/html; charset=ISO-8859-1"> </head> <body bgcolor="#FFFFFF" text="#000000"> Hi, From last night onwards, my mvn build is getting stuck for a long time ( > 30 minutes) on RunVmCommandTest Running org.ovirt.engine.core.bll.MoveDisksCommandTest Tests run: 9, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.04 sec Running org.ovirt.engine.core.bll.RunVmCommandTest Tests run: 25, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 1,983.033 sec Running org.ovirt.engine.core.bll.lock.InMemoryLockManagerTest Tests run: 4, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.007 sec Running org.ovirt.engine.core.bll.RemoveImageCommandTest The same issue is happening on one of my colleague's system as well. Any help in fixing this will be highly appreciated. Regards, Shireesh </body> </html> --------------050101090103000106050901--

4 8

[Engine-devel] Added support for POSIX and GNU long parameters to engine-manage-domains
by Martin Perina 10 Apr '13

10 Apr '13

Hi, I've created a patch that adds support for POSIX and GNU long paramaters. Patch is using argparse4j library (argparse4j.sourceforge.net) which suites our needs in my opinion better than other libraries I've tested (JCommander, commons-cli, args4j). Patch includes these changes: 1) "-action" parameter has been removed, each action is specified directly, for example "engine-manage-domains list" 2) "-interactive" parameter has been removed, if "--passwordFile" parameter is not specified, then the password will be read interactively 3) "-addPermissions" parameter has been rename to "--superuser" with "-s" short version 4) Each parameter has POSIX variant ("-p PROVIDER") and corresponding GNU long variant ("--provider=PROVIDER") 5) Commands and parameters names can be abbreviated as long as the abbreviation is unambiguous (for example "list" command can be specified like "engine-manage-domains l") So for example command to create a domain now may look like this: engine-manage-domains add -d xyz.com -p IPA -u admin engine-manage-domains add --domain=xyz.com --provider=IPA --user=admin engine-manage-domains a -d xyz.com -p ipa --user=admin All variants do the same. If you're interested, please review the patch: http://gerrit.ovirt.org/#/c/13776/ Regards Martin Perina

1 0

[Engine-devel] compilation stuck on RemoveSnapshotCommandTest?
by Einav Cohen 09 Apr '13

09 Apr '13

Hi, When trying to compile oVirt (with tests - see [1]), my compilation seems to get stuck on RemoveSnapshotCommandTest (see [2] for test file full path, [3] for output). When eliminating this test (e.g. I removed [2] locally from my file-system), compilation (including tests) is completed successfully. Anyone else encountered this problem / any idea what the problem might be? ---- Thanks, Einav [1] performed the following on the latest upstream: mvn clean mvn install -Pgwt-user,gwt-admin,all-langs -Dgwt.userAgent=gecko1_8 [2] ../backend/manager/modules/bll/src/test/java/org/ovirt/engine/core/bll/RemoveSnapshotCommandTest.java [3] last lines in compilation output: ... [INFO] ------------------------------------------------------------------------ [INFO] Building Backend Logic @Service bean 3.3.0-SNAPSHOT [INFO] ------------------------------------------------------------------------ ... Running org.ovirt.engine.core.bll.network.host.SetupNetworksHelperTest Tests run: 56, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.74 sec Running org.ovirt.engine.core.bll.network.cluster.GetAllNetworksByClusterIdQueryTest Tests run: 3, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.064 sec Running org.ovirt.engine.core.bll.network.cluster.AttachNetworkToVdsGroupCommandTest Tests run: 4, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.046 sec Running org.ovirt.engine.core.bll.network.cluster.NetworkClusterValidatorTest Tests run: 6, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.047 sec Running org.ovirt.engine.core.bll.network.cluster.GetVdsGroupsAndNetworksByNetworkIdQueryTest Tests run: 2, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.035 sec Running org.ovirt.engine.core.bll.network.vm.GetVmInterfacesByVmIdQueryTest Tests run: 3, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.042 sec Running org.ovirt.engine.core.bll.network.vm.GetVmsAndNetworkInterfacesByNetworkIdQueryTest Tests run: 4, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.056 sec Running org.ovirt.engine.core.bll.network.VmInterfaceManagerTest Tests run: 10, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.321 sec Running org.ovirt.engine.core.bll.network.template.GetTemplateInterfacesByTemplateIdQueryTest Tests run: 3, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.02 sec Running org.ovirt.engine.core.bll.network.template.GetVmTemplatesAndNetworkInterfacesByNetworkIdQueryTest Tests run: 2, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.022 sec Running org.ovirt.engine.core.bll.GetCommandsCompatibilityVersionsQueryTest Tests run: 3, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.09 sec Running org.ovirt.engine.core.bll.GetClustersWithPermittedActionQueryTest Tests run: 3, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.024 sec Running org.ovirt.engine.core.bll.RemoveSnapshotCommandTest [no more output after this point; waited ~20 minutes in this state before hitting "Ctrl+C"]

2 5

[Engine-devel] Java 7, revisited again
by Allon Mureinik 09 Apr '13

09 Apr '13

Hola, A couple of weeks (months?) ago we discussed upgrading to Java 7.[1] Generally, there was a positive vibe about moving forward with technology, although we noted that this should not be done for common, compat and the GWT modules, under the limitation of the current GWT version we're using. Here's an initial suggestion for this upgrade: http://gerrit.ovirt.org/#/c/13519/ Areas handled and checked: 1. compilation (including GWT compilation)[2] 2. animal-sniffer validations for to makes sure that modules that aren't supposed to use JDK7 features really don't[2] 3. Running and making sure the UI still works :-) (checkstyle issues which Laslo pointed out in the original discussion were already solved in a different patch merged long ago) Sincerely, Allon and Alissa [1] http://lists.ovirt.org/pipermail/engine-devel/2012-December/003139.html [2] This includes, of course, purposely introducing Java 7 syntax and JDK 7 features to modules that aren't supposed to have them, and making sure that the build fails early, as expected, without having to add the -Pgwt-admin or -Pgwt-user profiles.

2 3

[Engine-devel] RFC: is it possible to configure hosts in cluster to be NTP peers
by David Jaša 09 Apr '13

09 Apr '13

Hi, ovirt still doesn't configure NTP on host installation and relies on administrator not forgetting to set it up correctly, mainly because it is quite hard to configure it correctly automatically. There is one thing IMO that could be configured automatically and that could alleviate situation somewhat: make hosts in the cluster NTP peers so that when clocks go wrong in the cluster for any reason, the error is the same on all hosts in the cluster. The files could be stored in /etc/{ntp,chrony}/vdsm.conf for instance and referenced with includefile or include ..." in /etc/ntp.conf or /etc/chrony.conf respectively. What seems tricky though is that non-Up hosts should be excluded from peer list because there are higher chances that their clocks are not configured properly, so engine (or some host?) should trigger changes to NTP configuration pretty frequently. What do you think about these issues? I don't want to report bugs/RFEs on topic before I'll see your reply. David -- David Jaša, RHCE SPICE QE based in Brno GPG Key: 22C33E24 Fingerprint: 513A 060B D1B4 2A72 7F0D 0278 B125 CD00 22C3 3E24

1 0

Re: [Engine-devel] 答复: about ca-file
by Alon Bar-Lev 08 Apr '13

08 Apr '13

Please reply to list... You should put ca.crt at /home/leaboy/.spicec/spice_truststore.pem or specify --ca-file ca.crt at spicec command-line. Alon ----- Original Message ----- > From: "leaboy@126" <wlbleaboy(a)126.com> > To: "Alon Bar-Lev" <alonbl(a)redhat.com> > Sent: Monday, April 8, 2013 2:55:00 PM > Subject: 答复: [Engine-devel] about ca-file > > Thinks! Question 1 is resolved. > But, when I connected, I must assigned the --ca-file > /home/leaboy/overt_ca/ca.crt. > How can I connect just use --url --user --password without assigned > --ca-file, I mean > which directory I put the ca.crt > > in Question 2, when I connect vm use spicec directly , how can spicec to find > the ca.crt > > Leaboy Beijing > Thinks to abarlev > > -----邮件原件----- > 发件人: abarlev(a)redhat.com [mailto:abarlev@redhat.com] 代表 Alon Bar-Lev > 发送时间: 2013年4月8日 19:01 > 收件人: leaboy@126 > 抄送: engine-devel(a)ovirt.org > 主题: Re: [Engine-devel] about ca-file > > > $ wget -o ca-cert.pem http://192.168.1.181/ca.crt > > ----- Original Message ----- > > From: "leaboy@126" <wlbleaboy(a)126.com> > > To: engine-devel(a)ovirt.org > > Sent: Monday, April 8, 2013 1:09:03 PM > > Subject: [Engine-devel] about ca-file > > > > > > > > Question 1: > > > > Hi,all: > > > > I’m in troubling with ca-file, who can tell me which the direction assigned > > to CA_FILE > > > > On the webpage > > http://www.ovirt.org/How_to_Connect_to_SPICE_Console_Without_Portal > > > > saided from the web: wget -O ${CA_FILE} http://${OVIRT}/ca.crt > > > > When I use overt-shell, I get ca.pem like this : > > > > > > > > [leaboy@Leaboy ovirt_ca]$ pwd > > > > /home/leaboy/ovirt_ca > > > > [leaboy@Leaboy ovirt_ca]$ wget -o ca-cert.pem http://192.168.1.181/ca.pem > > > > [leaboy@Leaboy ovirt_ca]$ ls > > > > ca-cert.pem > > > > [leaboy@Leaboy ovirt_ca]$ > > > > > > > > And then, I launched overt-shell and connect to overt-engine like this: > > > > > > > > ++++++++++++++++++++++++++++++++++++++++++ > > > > > > > > Welcome to oVirt shell > > > > > > > > ++++++++++++++++++++++++++++++++++++++++++ > > > > > > > > > > > > [oVirt shell (disconnected)]# connect --url https://192.168.1.181 --user > > admin@internal --password 111111 --ca-file > > /home/leaboy/ovirt_ca/ca_cear.pem > > > > > > > > > > > > error: [ERROR]::oVirt API connection failure, [Errno 185090050] _ssl.c:340: > > error:0B084002:x509 certificate routines:X509_load_cert_crl_file:system lib > > > > > > > > > > > > [oVirt shell (disconnected)]# > > > > > > > > Questioin 2: > > > > When I connect the vm use spicec , get a error message like this: > > > > leaboy@leaboy:~/.spicec$ spicec -h 192.168.1.219 -p 5900 -s 5901 > > > > Error: SSL_CTX_load_verify_locations failed > > CA_file=/home/leaboy/.spicec/spice_truststore.pem > > > > Warning: SSL Error: > > > > leaboy@leaboy:~/.spicec$ > > > > _______________________________________________ > > Engine-devel mailing list > > Engine-devel(a)ovirt.org > > http://lists.ovirt.org/mailman/listinfo/engine-devel > > > > >

1 0

[Engine-devel] about ca-file
by leaboy＠126 08 Apr '13

08 Apr '13

ÕâÊÇÒ»·â MIME žñÊœµÄ¶à²¿·ÖÓÊŒþ¡£ ------=_NextPart_000_0011_01CE3484.27DE98B0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Question 1: Hi,all: I'm in troubling with ca-file, who can tell me which the direction assigned to CA_FILE On the webpage http://www.ovirt.org/How_to_Connect_to_SPICE_Console_Without_Portal saided from the web: wget -O ${CA_FILE} <http://%24%7Bovirt%7D/ca.crt> http://${OVIRT}/ca.crt When I use overt-shell, I get ca.pem like this : [leaboy@Leaboy ovirt_ca]$ pwd /home/leaboy/ovirt_ca [leaboy@Leaboy ovirt_ca]$ wget -o ca-cert.pem http://192.168.1.181/ca.pem [leaboy@Leaboy ovirt_ca]$ ls ca-cert.pem [leaboy@Leaboy ovirt_ca]$ And then, I launched overt-shell and connect to overt-engine like this: ++++++++++++++++++++++++++++++++++++++++++ Welcome to oVirt shell ++++++++++++++++++++++++++++++++++++++++++ [oVirt shell (disconnected)]# connect --url https://192.168.1.181 --user admin@internal --password 111111 --ca-file /home/leaboy/ovirt_ca/ca_cear.pem error: [ERROR]::oVirt API connection failure, [Errno 185090050] _ssl.c:340: error:0B084002:x509 certificate routines:X509_load_cert_crl_file:system lib [oVirt shell (disconnected)]# Questioin 2: When I connect the vm use spicec , get a error message like this: leaboy@leaboy:~/.spicec$ spicec -h 192.168.1.219 -p 5900 -s 5901 Error: SSL_CTX_load_verify_locations failed CA_file=/home/leaboy/.spicec/spice_truststore.pem Warning: SSL Error: leaboy@leaboy:~/.spicec$ ------=_NextPart_000_0011_01CE3484.27DE98B0 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable <html xmlns:v=3D"urn:schemas-microsoft-com:vml" = xmlns:o=3D"urn:schemas-microsoft-com:office:office" = xmlns:w=3D"urn:schemas-microsoft-com:office:word" = xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" = xmlns=3D"http://www.w3.org/TR/REC-html40"> <head> <META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; = charset=3Dus-ascii"> <meta name=3DGenerator content=3D"Microsoft Word 12 (filtered medium)"> <style>  </style>  </head> <body lang=3DZH-CN link=3Dblue vlink=3Dpurple = style=3D'text-justify-trim:punctuation'> <div class=3DSection1> Question = 1:<o:p></o:p> Hi,all:<o:p></o:p>          I’m in troubling with ca-file, who can tell me which the direction = assigned to  CA_FILE      <o:p></o:p> On the webpage <a href=3D"http://www.ovirt.org/How_to_Connect_to_SPICE_Console_Without_Port= al">http://www.ovirt.org/How_to_Connect_to_SPICE_Console_Without_Portal</= a> <o:p></o:p> saided  from the web: <code>wget -O = ${CA_FILE}</code> <code><a href=3D"http://%24%7Bovirt%7D/ca.crt">http://${OVIRT}/ca.crt</a></cod= e><o:p></o:p> When I use overt-shell, I get = ca.pem like this :<o:p></o:p> <o:p> </o:p>          [leaboy@Leaboy ovirt_ca]$ pwd<o:p></o:p> /home/leaboy/ovirt_ca<o:p></o:p> [leaboy@Leaboy ovirt_ca]$ wget -o ca-cert.pem <a href=3D"http://192.168.1.181/ca.pem">http://192.168.1.181/ca.pem</a><o:p>= </o:p> [leaboy@Leaboy ovirt_ca]$ ls<o:p></o:p> ca-cert.pem<o:p></o:p> [leaboy@Leaboy ovirt_ca]$<o:p></o:p> <o:p> </o:p> And then, I launched overt-shell = and connect to overt-engine like this:<o:p></o:p> <o:p> </o:p>          ++++++++++++++++++++++++++++++++++++++++++<o:p></o:p>  <o:p></o:p>           = Welcome to oVirt shell<o:p></o:p>  <o:p></o:p>  ++++++++++++++++++++++++++++++++++++++++++<o:p></o:p><= /span>         = <o:p></o:p>     <o:p></o:p> [oVirt shell (disconnected)]# connect --url <a href=3D"https://192.168.1.181">https://192.168.1.181</a> --user = admin@internal --password 111111 --ca-file = /home/leaboy/ovirt_ca/ca_cear.pem<o:p></o:p> <o:p> </o:p> <o:p> </o:p> error: [ERROR]::oVirt API connection failure, [Errno = 185090050] _ssl.c:340: error:0B084002:x509 certificate = routines:X509_load_cert_crl_file:system lib<o:p></o:p> <o:p> </o:p> <o:p> </o:p> [oVirt shell (disconnected)]#<o:p></o:p> <o:p> </o:p> Questioin = 2:<o:p></o:p> When I connect the vm use spicec = , get a error message like this:<o:p></o:p> leaboy@leaboy:~/.spicec$ spicec -h 192.168.1.219 -p 5900 = -s 5901<o:p></o:p> Error: SSL_CTX_load_verify_locations failed CA_file=3D/home/leaboy/.spicec/spice_truststore.pem<o:p></o:p>= Warning: SSL Error:<o:p></o:p> leaboy@leaboy:~/.spicec$<o:p></o:p> </div> </body> </html> ------=_NextPart_000_0011_01CE3484.27DE98B0--

2 1

[Engine-devel] about ca-file
by wanglibo 08 Apr '13

08 Apr '13

ÕâÊÇÒ»·â MIME žñÊœµÄ¶à²¿·ÖÓÊŒþ¡£ ------=_NextPart_000_000C_01CE3483.4438DB20 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Hi,all: I'm in troubling with ca-file, who can tell me which the direction assigned to CA_FILE On the webpage http://www.ovirt.org/How_to_Connect_to_SPICE_Console_Without_Portal saided from the web: wget -O ${CA_FILE} <http://%24%7Bovirt%7D/ca.crt> http://${OVIRT}/ca.crt When I use overt-shell, I get ca.pem like this : [leaboy@Leaboy ovirt_ca]$ pwd /home/leaboy/ovirt_ca [leaboy@Leaboy ovirt_ca]$ wget -o ca-cert.pem http://192.168.1.181/ca.pem [leaboy@Leaboy ovirt_ca]$ ls ca-cert.pem [leaboy@Leaboy ovirt_ca]$ And then, I launched overt-shell and connect to overt-engine like this: ++++++++++++++++++++++++++++++++++++++++++ Welcome to oVirt shell ++++++++++++++++++++++++++++++++++++++++++ [oVirt shell (disconnected)]# connect --url https://192.168.1.181 --user admin@internal --password 111111 --ca-file /home/leaboy/ovirt_ca/ca_cear.pem error: [ERROR]::oVirt API connection failure, [Errno 185090050] _ssl.c:340: error:0B084002:x509 certificate routines:X509_load_cert_crl_file:system lib [oVirt shell (disconnected)]# ------=_NextPart_000_000C_01CE3483.4438DB20 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable <html xmlns:v=3D"urn:schemas-microsoft-com:vml" = xmlns:o=3D"urn:schemas-microsoft-com:office:office" = xmlns:w=3D"urn:schemas-microsoft-com:office:word" = xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" = xmlns=3D"http://www.w3.org/TR/REC-html40"> <head> <meta http-equiv=3DContent-Type content=3D"text/html; = charset=3Dus-ascii"> <meta name=3DGenerator content=3D"Microsoft Word 12 (filtered medium)"> <style>  </style>  </head> <body lang=3DZH-CN link=3Dblue vlink=3Dpurple = style=3D'text-justify-trim:punctuation'> <div class=3DSection1> Hi,all:<o:p></o:p>          I’m in troubling with ca-file, who can tell me which the direction assigned = to  CA_FILE      <o:p></o:p> On the webpage <a href=3D"http://www.ovirt.org/How_to_Connect_to_SPICE_Console_Without_Port= al">http://www.ovirt.org/How_to_Connect_to_SPICE_Console_Without_Portal</= a> <o:p></o:p> saided  from the web: <code>wget -O = ${CA_FILE}</code> <code><a href=3D"http://%24%7Bovirt%7D/ca.crt">http://${OVIRT}/ca.crt</a></cod= e><o:p></o:p> When I use overt-shell, I get = ca.pem like this :<o:p></o:p> <o:p> </o:p>          = [leaboy@Leaboy ovirt_ca]$ pwd<o:p></o:p> /home/leaboy/ovirt_ca<o:p></o:p> [leaboy@Leaboy ovirt_ca]$ wget -o ca-cert.pem http://192.168.1.181/ca.pem<o:p></o:p> [leaboy@Leaboy ovirt_ca]$ ls<o:p></o:p> ca-cert.pem<o:p></o:p> [leaboy@Leaboy ovirt_ca]$<o:p></o:p> <o:p> </o:p> And then, I launched overt-shell = and connect to overt-engine like this:<o:p></o:p> <o:p> </o:p>          = ++++++++++++++++++++++++++++++++++++++++++<o:p></o:p>  <o:p></o:p>           = Welcome to oVirt shell<o:p></o:p>  <o:p></o:p>  ++++++++++++++++++++++++++++++++++++++++++<o:p></o:p><= /span>         = <o:p></o:p>     <o:p></o:p> [oVirt shell (disconnected)]# connect --url = https://192.168.1.181 --user admin@internal --password 111111 --ca-file /home/leaboy/ovirt_ca/ca_cear.pem<o:p></o:p> <o:p> </o:p> <o:p> </o:p> error: [ERROR]::oVirt API connection failure, [Errno = 185090050] _ssl.c:340: error:0B084002:x509 certificate routines:X509_load_cert_crl_file:system lib<o:p></o:p> <o:p> </o:p> <o:p> </o:p> [oVirt shell (disconnected)]#<o:p></o:p> <o:p> </o:p> </div> </body> </html> ------=_NextPart_000_000C_01CE3483.4438DB20--

1 0

[Engine-devel] about ca-file
by wanglibo 08 Apr '13

08 Apr '13

ÕâÊÇÒ»·â MIME žñÊœµÄ¶à²¿·ÖÓÊŒþ¡£ ------=_NextPart_000_0002_01CE3482.E93858E0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Hi,all: I'm in troubling with ca-file, who can tell me which the direction assigned to CA_FILE On the webpage http://www.ovirt.org/How_to_Connect_to_SPICE_Console_Without_Portal saided from the web: wget -O ${CA_FILE} <http://%24%7Bovirt%7D/ca.crt> http://${OVIRT}/ca.crt When I use overt-shell, I get ca.pem like this : [leaboy@Leaboy ovirt_ca]$ pwd /home/leaboy/ovirt_ca [leaboy@Leaboy ovirt_ca]$ wget -o ca-cert.pem http://192.168.1.181/ca.pem [leaboy@Leaboy ovirt_ca]$ ls ca-cert.pem [leaboy@Leaboy ovirt_ca]$ And then, I launched overt-shell and connect to overt-engine like this: ++++++++++++++++++++++++++++++++++++++++++ Welcome to oVirt shell ++++++++++++++++++++++++++++++++++++++++++ [oVirt shell (disconnected)]# connect --url https://192.168.1.181 --user admin@internal --password 111111 --ca-file /home/leaboy/ovirt_ca/ca_cear.pem error: [ERROR]::oVirt API connection failure, [Errno 185090050] _ssl.c:340: error:0B084002:x509 certificate routines:X509_load_cert_crl_file:system lib [oVirt shell (disconnected)]# ------=_NextPart_000_0002_01CE3482.E93858E0 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable <html xmlns:v=3D"urn:schemas-microsoft-com:vml" = xmlns:o=3D"urn:schemas-microsoft-com:office:office" = xmlns:w=3D"urn:schemas-microsoft-com:office:word" = xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" = xmlns=3D"http://www.w3.org/TR/REC-html40"> <head> <meta http-equiv=3DContent-Type content=3D"text/html; = charset=3Dus-ascii"> <meta name=3DGenerator content=3D"Microsoft Word 12 (filtered medium)"> <style>  </style>  </head> <body lang=3DZH-CN link=3Dblue vlink=3Dpurple = style=3D'text-justify-trim:punctuation'> <div class=3DSection1> Hi,all:<o:p></o:p>          I’m in troubling with ca-file, who can tell me which the direction assigned = to  CA_FILE      <o:p></o:p> On the webpage <a href=3D"http://www.ovirt.org/How_to_Connect_to_SPICE_Console_Without_Port= al">http://www.ovirt.org/How_to_Connect_to_SPICE_Console_Without_Portal</= a> <o:p></o:p> saided  from the web: <code>wget -O = ${CA_FILE}</code> <code><a href=3D"http://%24%7Bovirt%7D/ca.crt">http://${OVIRT}/ca.crt</a></cod= e><o:p></o:p> When I use overt-shell, I get = ca.pem like this :<o:p></o:p> <o:p> </o:p>          = [leaboy@Leaboy ovirt_ca]$ pwd<o:p></o:p> /home/leaboy/ovirt_ca<o:p></o:p> [leaboy@Leaboy ovirt_ca]$ wget -o ca-cert.pem http://192.168.1.181/ca.pem<o:p></o:p> [leaboy@Leaboy ovirt_ca]$ ls<o:p></o:p> ca-cert.pem<o:p></o:p> [leaboy@Leaboy ovirt_ca]$<o:p></o:p> <o:p> </o:p> And then, I launched overt-shell = and connect to overt-engine like this:<o:p></o:p> <o:p> </o:p>          = ++++++++++++++++++++++++++++++++++++++++++<o:p></o:p>  <o:p></o:p>           = Welcome to oVirt shell<o:p></o:p>  <o:p></o:p>  ++++++++++++++++++++++++++++++++++++++++++<o:p></o:p><= /span>         = <o:p></o:p>     <o:p></o:p> [oVirt shell (disconnected)]# connect --url = https://192.168.1.181 --user admin@internal --password 111111 --ca-file /home/leaboy/ovirt_ca/ca_cear.pem<o:p></o:p> <o:p> </o:p> <o:p> </o:p> error: [ERROR]::oVirt API connection failure, [Errno = 185090050] _ssl.c:340: error:0B084002:x509 certificate routines:X509_load_cert_crl_file:system lib<o:p></o:p> <o:p> </o:p> <o:p> </o:p> [oVirt shell (disconnected)]#<o:p></o:p> <o:p> </o:p> </div> </body> </html> ------=_NextPart_000_0002_01CE3482.E93858E0--

1 0