[Engine-devel] 答复: about ca-file

[Alon Bar-Lev]

Please reply to list...

You should put ca.crt at /home/leaboy/.spicec/spice_truststore.pem or specify --ca-file ca.crt at spicec command-line.

Alon

----- Original Message -----
> From: "leaboy at 126" <wlbleaboy at 126.com>
> To: "Alon Bar-Lev" <alonbl at redhat.com>
> Sent: Monday, April 8, 2013 2:55:00 PM
> Subject: 答复: [Engine-devel] about ca-file
> 
> Thinks! Question 1 is resolved.
> But, when I connected, I must assigned the --ca-file
> /home/leaboy/overt_ca/ca.crt.
> How can I connect just use  --url --user --password without assigned
> --ca-file, I mean
> which directory I put the ca.crt
> 
> in Question 2, when I connect vm use spicec directly , how can spicec to find
> the ca.crt
> 
> 										Leaboy Beijing
> 									Thinks to abarlev
> 
> -----邮件原件-----
> 发件人: abarlev at redhat.com [mailto:abarlev at redhat.com] 代表 Alon Bar-Lev
> 发送时间: 2013年4月8日 19:01
> 收件人: leaboy at 126
> 抄送: engine-devel at ovirt.org
> 主题: Re: [Engine-devel] about ca-file
> 
> 
> $ wget -o ca-cert.pem http://192.168.1.181/ca.crt
> 
> ----- Original Message -----
> > From: "leaboy at 126" <wlbleaboy at 126.com>
> > To: engine-devel at ovirt.org
> > Sent: Monday, April 8, 2013 1:09:03 PM
> > Subject: [Engine-devel] about ca-file
> > 
> > 
> > 
> > Question 1:
> > 
> > Hi,all:
> > 
> > I’m in troubling with ca-file, who can tell me which the direction assigned
> > to CA_FILE
> > 
> > On the webpage
> > http://www.ovirt.org/How_to_Connect_to_SPICE_Console_Without_Portal
> > 
> > saided from the web: wget -O ${CA_FILE} http://${OVIRT}/ca.crt
> > 
> > When I use overt-shell, I get ca.pem like this :
> > 
> > 
> > 
> > [leaboy at Leaboy ovirt_ca]$ pwd
> > 
> > /home/leaboy/ovirt_ca
> > 
> > [leaboy at Leaboy ovirt_ca]$ wget -o ca-cert.pem http://192.168.1.181/ca.pem
> > 
> > [leaboy at Leaboy ovirt_ca]$ ls
> > 
> > ca-cert.pem
> > 
> > [leaboy at Leaboy ovirt_ca]$
> > 
> > 
> > 
> > And then, I launched overt-shell and connect to overt-engine like this:
> > 
> > 
> > 
> > ++++++++++++++++++++++++++++++++++++++++++
> > 
> > 
> > 
> > Welcome to oVirt shell
> > 
> > 
> > 
> > ++++++++++++++++++++++++++++++++++++++++++
> > 
> > 
> > 
> > 
> > 
> > [oVirt shell (disconnected)]# connect --url https://192.168.1.181 --user
> > admin at internal --password 111111 --ca-file
> > /home/leaboy/ovirt_ca/ca_cear.pem
> > 
> > 
> > 
> > 
> > 
> > error: [ERROR]::oVirt API connection failure, [Errno 185090050] _ssl.c:340:
> > error:0B084002:x509 certificate routines:X509_load_cert_crl_file:system lib
> > 
> > 
> > 
> > 
> > 
> > [oVirt shell (disconnected)]#
> > 
> > 
> > 
> > Questioin 2:
> > 
> > When I connect the vm use spicec , get a error message like this:
> > 
> > leaboy at leaboy:~/.spicec$ spicec -h 192.168.1.219 -p 5900 -s 5901
> > 
> > Error: SSL_CTX_load_verify_locations failed
> > CA_file=/home/leaboy/.spicec/spice_truststore.pem
> > 
> > Warning: SSL Error:
> > 
> > leaboy at leaboy:~/.spicec$
> > 
> > _______________________________________________
> > Engine-devel mailing list
> > Engine-devel at ovirt.org
> > http://lists.ovirt.org/mailman/listinfo/engine-devel
> > 
> 
> 
>