Re: [Users] replacing self-signed certificates

2013-11-21 Thread i iordanov
Hi Itamar, On Wed, Nov 20, 2013 at 2:54 PM, Itamar Heim ih...@redhat.com wrote: iordan - maybe wikify for future generations? I don't see why not! Once I verify the procedure I'll get an account to edit the wiki. Cheers, iordan ___ Users mailing

[Users] replacing self-signed certificates

2013-11-20 Thread i iordanov
Hello, I searched around but could not come up with specific instructions for how to replace the self-signed certificates in an oVirt 3.3 setup with non-self-signed certificates. I need to ensure that my oVirt/SPICE client actually does the right thing when connecting to a machine with a 3rd

Re: [Users] replacing self-signed certificates

2013-11-20 Thread Thomas Suckow
I don't know about the native SPICE client, but here is what I did for apache and the websocket proxy: In /etc/httpd/conf.d/ssl.conf it lists SSLCertificateFile SSLCertificateKeyFile SSLCertificateChainFile SSLCACertificateFile Those are the files you need to replace for the web interface. My

Re: [Users] replacing self-signed certificates

2013-11-20 Thread i iordanov
Hi Thomas, Thanks for your response! This goes a long way, however there is still the unknown where ovirt-engine takes the SPICE certificate and CA from. Can somebody confirm that replacing just the files referenced in the apache configuration will be sufficient? Thanks! iordan On Wed, Nov

Re: [Users] replacing self-signed certificates

2013-11-20 Thread Alon Bar-Lev
- Original Message - From: i iordanov iiorda...@gmail.com To: users@ovirt.org Sent: Wednesday, November 20, 2013 6:50:04 PM Subject: [Users] replacing self-signed certificates Hello, I searched around but could not come up with specific instructions for how to replace the self

Re: [Users] replacing self-signed certificates

2013-11-20 Thread i iordanov
Thanks Alon and Thomas! iordan On Wed, Nov 20, 2013 at 1:51 PM, Alon Bar-Lev alo...@redhat.com wrote: - Original Message - From: i iordanov iiorda...@gmail.com To: users@ovirt.org Sent: Wednesday, November 20, 2013 6:50:04 PM Subject: [Users] replacing self-signed

Re: [Users] replacing self-signed certificates

2013-11-20 Thread Itamar Heim
iordanov iiorda...@gmail.com mailto:iiorda...@gmail.com To: users@ovirt.org mailto:users@ovirt.org Sent: Wednesday, November 20, 2013 6:50:04 PM Subject: [Users] replacing self-signed certificates Hello, I searched around but could not come up with specific