[Engine-devel] Fwd: about ca-file

[Michael Pasternak]

Hi,

Please make sure [1] is exist on the file system and has right permissions,

btw till you resolve this, you can connect to your site in insecure mode:

1. without host being validated raising --dont-validate-cert-chain flag
2. without no-certificate error being thrown raising --insecure flag (host
will be validated once [1] is available/accessible by the shell)

[1] /home/leaboy/ovirt_ca/ca_cear.pem

On 04/20/2013 11:37 PM, Itamar Heim wrote:
> 
> [Engine-devel] about ca-file.eml
> 
> Subject:
> [Engine-devel] about ca-file
> From:
> "wanglibo" <wanglibo at tongfangcloud.com>
> Date:
> Mon, 8 Apr 2013 18:02:37 +0800
> 
> To:
> <engine-devel at ovirt.org>
> 
> 
> Hi,all:
> 
>          I’m in troubling with ca-file, who can tell me which the direction assigned to  CA_FILE      
> 
> On the webpage http://www.ovirt.org/How_to_Connect_to_SPICE_Console_Without_Portal
> 
> saided  from the web: |wget -O ${CA_FILE}| |*http://${OVIRT}/ca.crt* <http://%24%7Bovirt%7D/ca.crt>|
> 
> When I use overt-shell, I get ca.pem like this :
> 
>  
> 
>          [leaboy at Leaboy ovirt_ca]$ pwd
> 
> /home/leaboy/ovirt_ca
> 
> [leaboy at Leaboy ovirt_ca]$ wget -o ca-cert.pem http://192.168.1.181/ca.pem
> 
> [leaboy at Leaboy ovirt_ca]$ ls
> 
> ca-cert.pem
> 
> [leaboy at Leaboy ovirt_ca]$
> 
>  
> 
> And then, I launched overt-shell and connect to overt-engine like this:
> 
>  
> 
>          ++++++++++++++++++++++++++++++++++++++++++
> 
>  
> 
>            Welcome to oVirt shell
> 
>  
> 
>  ++++++++++++++++++++++++++++++++++++++++++
> 
>        
> 
>    
> 
> [oVirt shell (disconnected)]# *connect --url https://192.168.1.181 --user admin at internal --password 111111 --ca-file /home/leaboy/ovirt_ca/ca_cear.pem*
> 
>  
> 
>  
> 
> error: [ERROR]::oVirt API connection failure, [Errno 185090050] _ssl.c:340: error:0B084002:x509 certificate routines:X509_load_cert_crl_file:system lib
> 
>  
> 
>  
> 
> [oVirt shell (disconnected)]#
> 
>  
> 
> 
> 
> _______________________________________________
> Engine-devel mailing list
> Engine-devel at ovirt.org
> http://lists.ovirt.org/mailman/listinfo/engine-devel


-- 

Michael Pasternak
RedHat, ENG-Virtualization R&D