[Users] noVNC https certs

[Thomas Suckow]

On 01/13/2014 09:50 AM, Neil Schulz wrote:
> So, this is the only way to stop having to accept the cert?
>
> I'd have to tell all our clients to download and install that cert to 
> their workstation?
>
No.

You can replace the  Websocket Proxy certs referenced by
/etc/ovirt-engine/ovirt-websocket-proxy.conf.d/10-setup.conf

The websocket proxy needs a combined certificate file with your cert and
the entire chain for SSL_CERTIFICATE

SSL_KEY is just the unencrypted key, and it MUST be accessible by the
ovirt user.