[Users] Specifying values for cert, key, and CA for ovirt-shell

[Joop]

Bob Doolittle wrote:
>
> On 01/08/2014 02:17 PM, Joop wrote:
>> Bob Doolittle wrote:
>>> Hi,
>>>
>>> I want to run ovirt-shell directly (as root) on the Engine. 
>>> Presumably all the files I need for CA, key, and cert are in the 
>>> /etc/pki area.
>>>
>>> But when I use the attached .ovirtshellrc file I get:
>>>
>>> error: [Errno 336265218] _ssl.c:341: error:140B0002:SSL 
>>> routines:SSL_CTX_use_PrivateKey_file:system lib
>>>
>>> How can I specify an appropriate configuration to get this working?
>>> I would prefer to keep using SSL if possible.
>> Just guessing but I don't think that your fqdn is localhost in your 
>> certs. Use your fqdn for the url variable.
>
> Good thought. But now I am getting:
>
> error: [Errno 336265225] _ssl.c:341: error:140B0009:SSL 
> routines:SSL_CTX_use_PrivateKey_file:PEM lib
>
> Some searching indicates that my keys and certs need to be in pem 
> format, so maybe I have to convert them before use? Any tips on how to 
> do that?
>
What happens if you leave out the ca_file/key_file/cert_file variables?
I just played around with ovirt-shell and made a .ovirtshellrc file, on 
the engine, and don't remember setting these and I could login and run 
scripts
Can't access my test environment right now so this is also a shot in the 
dark.

Joop