On Thu, Mar 08, 2012 at 12:04:45PM +0100, Saša Tomić wrote:
> 
> 
> On 03/08/2012 11:56 AM, Federico Simoncelli wrote:
> >----- Original Message -----
> >>
> >>We are getting closer now, it appears that some paths are broken...
> >>
> >>2012-03-07 15:42:58.134+0000: 1590: error :
> >>virNetTLSContextCheckCertBasicConstraints:166 : The certificate
> >>/etc/pki/vdsm/certs/vdsmcert.pem basic constraints show a CA, but we
> >>need one for a server
> >>
> >Could you check if you have this line in the libvirtd configuration:
> >
> ># egrep ^ca_file /etc/libvirt/libvirtd.conf
> >ca_file="/etc/pki/vdsm/certs/cacert.pem" # by vdsm
> >
> I was just checking that, and the line is there.

To have this removed, make sure /etc/vdsm/vdsm.conf has ssl=false,
and run
    /lib/systemd/systemd-vdsmd reconfigure

Basically, I believe that you have found a bug with the default
certificate that Vdsm creates for itself when it is installed.
Thanks.
Let's see if you can work with ssl=false.

Dan.
_______________________________________________
vdsm-devel mailing list
vdsm-devel@lists.fedorahosted.org
https://fedorahosted.org/mailman/listinfo/vdsm-devel

Reply via email to