[ovirt-users] noVNC problems after upgrading to 3.5.0

Darrell Budic budic at onholyground.com
Fri Nov 14 17:27:52 EST 2014


That’s what I thought too, but... Firefox tells me “This certificate is already installed as a certificate authority.” though. It looks like the cert for :6100 is the proper one, too. Maybe a firefox change with their new signing rules (i’ve disabled security.use_mozillapkix_verification due to problems with other internal certs)? I tried removing all the old web site certs and still had to add the https://<engine>:6100 cert to get the noVNC console to connect.


> On Nov 14, 2014, at 11:25 AM, Simone Tiraboschi <stirabos at redhat.com> wrote:
> 
> 
> 
> 
> 
> ----- Original Message -----
>> From: "Darrell Budic" <budic at onholyground.com>
>> To: "Ludek Finstrle" <lfinstrle at netsuite.com>
>> Cc: "users" <users at ovirt.org>
>> Sent: Friday, November 14, 2014 5:31:57 PM
>> Subject: Re: [ovirt-users] noVNC problems after upgrading to 3.5.0
>> 
>> That was it, thanks!
> 
> If you are correctly trusting your oVirt internal CA you don't need to explicitly trust every single certificate signed by that CA. Please double check it.
> 
>> -Darrell
>> 
>> 
>> 
>> 
>> On Nov 14, 2014, at 7:09 AM, Finstrle, Ludek < lfinstrle at netsuite.com >
>> wrote:
>> 
>> 
>> Hi Darrel,
>> 
>> have you accepted the certificate for the web socket proxy?
>> ( usually https://<your engine>:6100/ )
>> 
>> Cheers,
>> 
>> Luf
>> 
>> Darrell Budic píše v Čt 13. 11. 2014 v 14:25 -0600:
>>> I had noVNC working under 3.4, but can’t seem to get it back up after
>>> updating to 3.5.0. VNC is working if I make direct connections, but it
>>> looks like the web socket proxy never tries to connect to the host server.
>>> noVNC is just reporting then generic 1006 error. Firefox reports it
>>> already has the right ca.crt installed, so it’s not that. From watching
>>> the network, it looks like it never gets authenticated properly to the web
>>> proxy, and never tries to connect on from there.
>>> 
>>> Any way to get some debugging info for the web socket proxy? Not locating
>>> any in the usual log files when I try this…
>>> 
>>> Anyone else seeing a similar problem?
>>> 
>>> -Darrell
>>> _______________________________________________
>>> Users mailing list
>>> Users at ovirt.org
>>> http://lists.ovirt.org/mailman/listinfo/users
>> 
>> 
>> NOTICE: This email and any attachments may contain confidential and
>> proprietary information of NetSuite Inc. and is for the sole use of the
>> intended recipient for the stated purpose. Any improper use or distribution
>> is prohibited. If you are not the intended recipient, please notify the
>> sender; do not review, copy or distribute; and promptly delete or destroy
>> all transmitted information. Please note that all communications and
>> information transmitted through this email system may be monitored and
>> retained by NetSuite or its agents and that all incoming email is
>> automatically scanned by a third party spam and filtering service which may
>> result in deletion of a legitimate e-mail before it is read by the intended
>> recipient.
>> 
>> 
>> _______________________________________________
>> Users mailing list
>> Users at ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users



More information about the Users mailing list