[Users] SpiceHTML5, noVNC console and Spice Proxy mixable?

[Gianluca Cecchi]

On Fri, Dec 13, 2013 at 5:57 PM, Alon Bar-Lev wrote:

>>
>>
>> Under /etc/pki/ovirt-engine/keys I only have these files:
>> [root at tekkaman keys]# ll
>> total 16
>> -rw-r-----. 1 apache apache 1828 Feb 10  2013 apache.key.nopass
>> -rw-r-----. 1 apache apache 2677 Feb 10  2013 apache.p12
>> -rw-------. 1 root   root   1828 Feb 10  2013 engine_id_rsa
>> -rw-r-----. 1 ovirt  ovirt  2677 Feb 10  2013 engine.p12
>>
>> and for certs:
>>
>> [root at tekkaman old_logs]# ll /etc/pki/ovirt-engine/certs/
>> total 60
>> -rw-r--r--. 1 root   root   4810 Feb 10  2013 01.pem
>> -rw-r--r--. 1 root   root   4957 Feb 10  2013 02.pem
>> -rw-r--r--. 1 root   root   4957 Feb 10  2013 03.pem
>> -rw-r--r--. 1 ovirt  ovirt  4931 Feb 10  2013 04.pem
>> -rw-r-----. 1 apache apache 4957 Feb 10  2013 apache.cer
>> -rw-r--r--. 1 root   root   1480 Feb 10  2013 ca.der
>> -rw-r--r--. 1 root   root   4957 Feb 10  2013 engine.cer
>> -rw-r--r--. 1 ovirt  ovirt  4931 Feb 10  2013
>> tekkaman.localdomain.localcert.pem
>>
>> Can I directly proceed with step 2 or is it a problem that I have no
>> /etc/pki/ovirt-engine/keys/websocket-proxy.p12 in place at the moment?
>
> Yes, after running setup you should notice these.
>

Wow, finally!
I got it at the end. Thanks!
I verified both SpiceHTML5 and noVNC work now

[root at tekkaman ~]# ll  /etc/pki/ovirt-engine/keys
total 24
-rw-r-----. 1 apache apache 1828 Feb 10  2013 apache.key.nopass
-rw-r-----. 1 apache apache 2677 Feb 10  2013 apache.p12
-rw-------. 1 root   root   1828 Feb 10  2013 engine_id_rsa
-rw-r-----. 1 ovirt  ovirt  2677 Feb 10  2013 engine.p12
-rw-------. 1 ovirt  ovirt  1828 Dec 13 22:30 websocket-proxy.key.nopass
-rw-------. 1 root   root   2669 Dec 13 22:30 websocket-proxy.p12

[root at tekkaman ~]#  ll /etc/pki/ovirt-engine/certs/
total 76
-rw-r--r--. 1 root   root   4810 Feb 10  2013 01.pem
-rw-r--r--. 1 root   root   4957 Feb 10  2013 02.pem
-rw-r--r--. 1 root   root   4957 Feb 10  2013 03.pem
-rw-r--r--. 1 ovirt  ovirt  4931 Feb 10  2013 04.pem
-rw-r--r--. 1 root   root   4952 Dec 13 22:30 05.pem
-rw-r-----. 1 apache apache 4957 Feb 10  2013 apache.cer
-rw-r--r--. 1 root   root   1480 Feb 10  2013 ca.der
-rw-r--r--. 1 root   root   4957 Feb 10  2013 engine.cer
-rw-r--r--. 1 ovirt  ovirt  4931 Feb 10  2013 tekkaman.localdomain.localcert.pem
-rw-r--r--. 1 root   root   4952 Dec 13 22:30 websocket-proxy.cer

But this means that what documented here, that was what I followed
some weeks ago, is incomplete:
http://www.ovirt.org/Features/noVNC_console#Setup_Websocket_Proxy_on_the_Enging_Post_Install

?

Or simply that my initial ovirt engine version didn't have this
feature at all so that websocket certificate part wasn't created on
February 2013?

BTW: initial test of my windows XP guest not usable...
see this screencast where first half is with firefox 26 and second
part with chrome 31.0.1650.63, both run from a fedora 19 client
https://drive.google.com/file/d/0BwoPbcrMv8mvLUMyOWNPVUFOSkE/edit?usp=sharing

But I'm going to do more tests with more kind of guests and eventually
post in separate thread.

Thanks again Alon and Frank

Gianluca