Please reply to list... You should put ca.crt at /home/leaboy/.spicec/spice_truststore.pem or specify --ca-file ca.crt at spicec command-line.
Alon ----- Original Message ----- > From: "leaboy@126" <wlblea...@126.com> > To: "Alon Bar-Lev" <alo...@redhat.com> > Sent: Monday, April 8, 2013 2:55:00 PM > Subject: 答复: [Engine-devel] about ca-file > > Thinks! Question 1 is resolved. > But, when I connected, I must assigned the --ca-file > /home/leaboy/overt_ca/ca.crt. > How can I connect just use --url --user --password without assigned > --ca-file, I mean > which directory I put the ca.crt > > in Question 2, when I connect vm use spicec directly , how can spicec to find > the ca.crt > > > Leaboy Beijing > Thinks > to abarlev > > -----邮件原件----- > 发件人: abar...@redhat.com [mailto:abar...@redhat.com] 代表 Alon Bar-Lev > 发送时间: 2013年4月8日 19:01 > 收件人: leaboy@126 > 抄送: engine-devel@ovirt.org > 主题: Re: [Engine-devel] about ca-file > > > $ wget -o ca-cert.pem http://192.168.1.181/ca.crt > > ----- Original Message ----- > > From: "leaboy@126" <wlblea...@126.com> > > To: engine-devel@ovirt.org > > Sent: Monday, April 8, 2013 1:09:03 PM > > Subject: [Engine-devel] about ca-file > > > > > > > > Question 1: > > > > Hi,all: > > > > I’m in troubling with ca-file, who can tell me which the direction assigned > > to CA_FILE > > > > On the webpage > > http://www.ovirt.org/How_to_Connect_to_SPICE_Console_Without_Portal > > > > saided from the web: wget -O ${CA_FILE} http://${OVIRT}/ca.crt > > > > When I use overt-shell, I get ca.pem like this : > > > > > > > > [leaboy@Leaboy ovirt_ca]$ pwd > > > > /home/leaboy/ovirt_ca > > > > [leaboy@Leaboy ovirt_ca]$ wget -o ca-cert.pem http://192.168.1.181/ca.pem > > > > [leaboy@Leaboy ovirt_ca]$ ls > > > > ca-cert.pem > > > > [leaboy@Leaboy ovirt_ca]$ > > > > > > > > And then, I launched overt-shell and connect to overt-engine like this: > > > > > > > > ++++++++++++++++++++++++++++++++++++++++++ > > > > > > > > Welcome to oVirt shell > > > > > > > > ++++++++++++++++++++++++++++++++++++++++++ > > > > > > > > > > > > [oVirt shell (disconnected)]# connect --url https://192.168.1.181 --user > > admin@internal --password 111111 --ca-file > > /home/leaboy/ovirt_ca/ca_cear.pem > > > > > > > > > > > > error: [ERROR]::oVirt API connection failure, [Errno 185090050] _ssl.c:340: > > error:0B084002:x509 certificate routines:X509_load_cert_crl_file:system lib > > > > > > > > > > > > [oVirt shell (disconnected)]# > > > > > > > > Questioin 2: > > > > When I connect the vm use spicec , get a error message like this: > > > > leaboy@leaboy:~/.spicec$ spicec -h 192.168.1.219 -p 5900 -s 5901 > > > > Error: SSL_CTX_load_verify_locations failed > > CA_file=/home/leaboy/.spicec/spice_truststore.pem > > > > Warning: SSL Error: > > > > leaboy@leaboy:~/.spicec$ > > > > _______________________________________________ > > Engine-devel mailing list > > Engine-devel@ovirt.org > > http://lists.ovirt.org/mailman/listinfo/engine-devel > > > > > _______________________________________________ Engine-devel mailing list Engine-devel@ovirt.org http://lists.ovirt.org/mailman/listinfo/engine-devel