[ovirt-users] Re: replaced ovirt certs, now i'm locked out with unable to find valid certification path

2019-05-06 Thread michael
I Also get these errors in the websocket proxy, it looks like either I messed up a cert on the main ovirt machine, or there is some additiona configuration on the hosts. May 06 22:33:07 ovirt.domain.com ovirt-websocket[31306]: 2019-05-06 22:33:07,786-0400 ovirt-websocket-proxy: INFO

[ovirt-users] Re: replaced ovirt certs, now i'm locked out with unable to find valid certification path

2019-05-05 Thread michael
This had nothing to do with LDAP or anything, just trying to change the cert to a 3rd party signed one. Until I did those two steps I was unable to sign into the portal, as I just had a java error every time, it had nothing to do with LDAP. For me, that SSL document is really confusing

[ovirt-users] Re: replaced ovirt certs, now i'm locked out with unable to find valid certification path

2019-05-05 Thread Yedidyah Bar David
Hi, On Sat, May 4, 2019 at 1:24 AM wrote: > > I fixed this 30 minutes after I posted this. So for anyone else that has > this issue, It turns out that the cert wan't getting imported after running > the command "keytool -import -alias ovirt -keystore ./cacerts -file > <3rdpartycert>.cer"

[ovirt-users] Re: replaced ovirt certs, now i'm locked out with unable to find valid certification path

2019-05-03 Thread michael
It appears I spoke too soon, even though I can now get into the ovirt portal, I can't connect with the spice console. Even after recopying the cert and key over and restarting the service. ___ Users mailing list -- users@ovirt.org To unsubscribe send

[ovirt-users] Re: replaced ovirt certs, now i'm locked out with unable to find valid certification path

2019-05-03 Thread michael
I fixed this 30 minutes after I posted this. So for anyone else that has this issue, It turns out that the cert wan't getting imported after running the command "keytool -import -alias ovirt -keystore ./cacerts -file <3rdpartycert>.cer" manually, as "update-ca-trust" did not add it