Re: [pve-devel] Spice problems with intermediate certificates

2014-08-25 Thread Alexandre DERUMIER
Hi, I'm using a rapidssl wildcard certificate without any problem. certificate chain is: *.odiso.net - rapidssl CA (intermediate) - geotrust global ca - Mail original - De: Dietmar Maurer diet...@proxmox.com À: pve-devel@pve.proxmox.com Envoyé: Lundi 25 Août 2014 07:32:43 Objet:

Re: [pve-devel] [PATCH] add conflict to debian qemu-utils package

2014-08-25 Thread Alexandre DERUMIER
Doesn't protect it to install qemu-utils after proxmox install ? (I'm not expert with debian packages) - Mail original - De: Dietmar Maurer diet...@proxmox.com À: Alexandre Derumier aderum...@odiso.com, pve-devel@pve.proxmox.com Envoyé: Lundi 25 Août 2014 06:31:12 Objet:

Re: [pve-devel] Spice problems with intermediate certificates

2014-08-25 Thread Alexandre DERUMIER
http://lists.freedesktop.org/archives/spice-devel/2014-August/017247.html Maybe for self signed certificates, you need to trust the intermediate CA in your client local ca store ? - Mail original - De: Dietmar Maurer diet...@proxmox.com À: pve-devel@pve.proxmox.com Envoyé: Lundi

[pve-devel] [PATCH] resourcestore : add host cpu usage

2014-08-25 Thread Alexandre Derumier
Currently we can't sort easily vms cpu usage to find which vm use the more host ressource. This add a new hostcpu, value is vm cpu * vm maxcpus. (This give us a result like a top on host, so 200% = 2 cores 100%). Signed-off-by: Alexandre Derumier aderum...@odiso.com --- www/manager/Utils.js

Re: [pve-devel] Spice problems with intermediate certificates

2014-08-25 Thread Dietmar Maurer
I'm using a rapidssl wildcard certificate without any problem. certificate chain is: *.odiso.net - rapidssl CA (intermediate) - geotrust global ca strange. Where do you store the intermediate cert? ___ pve-devel mailing list

Re: [pve-devel] Spice problems with intermediate certificates

2014-08-25 Thread Dietmar Maurer
I just check, in my pve-root-ca.pem I have both intermediate ca (rapidssl) + Geotrust cat /etc/pve/pve-root-ca.pem -BEGIN CERTIFICATE- rapidssl -END CERTIFICATE- -BEGIN CERTIFICATE- geotrust -END CERTIFICATE- And what is the content of

Re: [pve-devel] Spice problems with intermediate certificates

2014-08-25 Thread Dietmar Maurer
-BEGIN CERTIFICATE- rapidssl -END CERTIFICATE- Please can you post that certificate? ___ pve-devel mailing list pve-devel@pve.proxmox.com http://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-devel

Re: [pve-devel] Spice problems with intermediate certificates

2014-08-25 Thread Dietmar Maurer
Also, what is the output of: # openssl verify /etc/pve/local/pve-ssl.pem Can you verify without specifying a CAFile? ___ pve-devel mailing list pve-devel@pve.proxmox.com http://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-devel

Re: [pve-devel] Spice problems with intermediate certificates

2014-08-25 Thread Alexandre DERUMIER
Also, what is the output of: # openssl verify /etc/pve/local/pve-ssl.pem # openssl verify /etc/pve/local/pve-ssl.pem /etc/pve/local/pve-ssl.pem: serialNumber = 6OIC-M6dsSmyl3j9087fa638RY/f8cC3, OU = GT29098117, OU = See www.rapidssl.com/resources/cps (c)13, OU = Domain Control Validated -

Re: [pve-devel] Spice problems with intermediate certificates

2014-08-25 Thread Dietmar Maurer
# openssl verify /etc/pve/local/pve-ssl.pem # openssl verify /etc/pve/local/pve-ssl.pem /etc/pve/local/pve-ssl.pem: serialNumber = 6OIC- M6dsSmyl3j9087fa638RY/f8cC3, OU = GT29098117, OU = See www.rapidssl.com/resources/cps (c)13, OU = Domain Control Validated - RapidSSL(R), CN =

Re: [pve-devel] Spice problems with intermediate certificates

2014-08-25 Thread Alexandre DERUMIER
I guess you get an OK when using: # openssl verify -CAfile /etc/pve/pve-root-ca.pem /etc/pve/local/pve-ssl.pem /etc/pve/local/pve-ssl.pem: OK Yes, indeed # openssl verify -CAfile /etc/pve/pve-root-ca.pem /etc/pve/local/pve-ssl.pem /etc/pve/local/pve-ssl.pem: OK - Mail original -

Re: [pve-devel] Spice problems with intermediate certificates

2014-08-25 Thread Alexandre DERUMIER
And /etc/pve/local/pve-ssl.pem only contain the server cert? yes, only the server cert. - Mail original - De: Dietmar Maurer diet...@proxmox.com À: Alexandre DERUMIER aderum...@odiso.com Cc: pve-devel@pve.proxmox.com Envoyé: Lundi 25 Août 2014 18:23:38 Objet: RE: [pve-devel]

Re: [pve-devel] Spice problems with intermediate certificates

2014-08-25 Thread Michael Rasmussen
On Mon, 25 Aug 2014 18:35:53 +0200 (CEST) Alexandre DERUMIER aderum...@odiso.com wrote: And /etc/pve/local/pve-ssl.pem only contain the server cert? yes, only the server cert. Mine contains both the server cert and the intermediate cert as described in the wiki:

[pve-devel] uuid generator ?

2014-08-25 Thread Alexandre DERUMIER
Hi, I need to implement an qemu uuid generator (because I need unique IDs across multiple proxmox cluster) I'm thinked about to add a new option : /etc/pve/datacenter.cfg generate_uuid : 0|1 Then at vm creation, use perl Data::UUID to generatate smbios : uuid= What do you think

Re: [pve-devel] uuid generator ?

2014-08-25 Thread Alexandre DERUMIER
Oh, I didn't see that it was already added 2 months ago ! https://git.proxmox.com/?p=qemu-server.git;a=commit;h=47314bf5e23b8ec0d4a77b12755824d1efcb20fb great feature :) - Mail original - De: Alexandre DERUMIER aderum...@odiso.com À: pve-devel@pve.proxmox.com Envoyé: Mardi 26 Août

Re: [pve-devel] uuid generator ?

2014-08-25 Thread Alexandre DERUMIER
I didn't see that it was already added 2 months ago ! Because it's not working with cloned vms. I'll send a patch for this. - Mail original - De: Alexandre DERUMIER aderum...@odiso.com À: pve-devel@pve.proxmox.com Envoyé: Mardi 26 Août 2014 06:04:21 Objet: Re: [pve-devel] uuid

Re: [pve-devel] uuid generator ?

2014-08-25 Thread Dietmar Maurer
I thought that is already implemented: https://git.proxmox.com/?p=qemu-server.git;a=commitdiff;h=47314bf5e23b8ec0d4a77b12755824d1efcb20fb Please test why that does not work for you. I need to implement an qemu uuid generator (because I need unique IDs across multiple proxmox cluster)

Re: [pve-devel] uuid generator ?

2014-08-25 Thread Dietmar Maurer
I didn't see that it was already added 2 months ago ! Because it's not working with cloned vms. I'll send a patch for this. Oh - Please send a patch ;-) ___ pve-devel mailing list pve-devel@pve.proxmox.com

[pve-devel] qemu-server : clone : generate a new uuid

2014-08-25 Thread Alexandre Derumier
This generate a new uuid when cloning a template ___ pve-devel mailing list pve-devel@pve.proxmox.com http://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-devel

[pve-devel] [PATCH] clone : generate a new uuid

2014-08-25 Thread Alexandre Derumier
Signed-off-by: Alexandre Derumier aderum...@odiso.com --- PVE/API2/Qemu.pm | 16 1 file changed, 16 insertions(+) diff --git a/PVE/API2/Qemu.pm b/PVE/API2/Qemu.pm index 165dc3d..d135bc4 100644 --- a/PVE/API2/Qemu.pm +++ b/PVE/API2/Qemu.pm @@ -2279,6 +2279,22 @@

Re: [pve-devel] Spice problems with intermediate certificates

2014-08-25 Thread Dietmar Maurer
Mine contains both the server cert and the intermediate cert as described in the wiki: So it seems I am the only one with that problem. So the question is if this is related to StartCom Certification Authority. Anybody successfully using StartCom Certification Authority with StartCom Class 2

Re: [pve-devel] Spice problems with intermediate certificates

2014-08-25 Thread Adrian Costin
Anybody successfully using StartCom Certification Authority with StartCom Class 2 Primary Intermediate Server CA? Yes. I've done the following: 1. Private key in: /etc/pve/local/pve-ssl.key and /etc/pve/pve-www.key 2. Intermediate cert file in: /etc/pve/pve-root-ca.pem 3.