Re: [Users] replacing self-signed certificates

2013-11-21 Thread i iordanov
Hi Itamar, On Wed, Nov 20, 2013 at 2:54 PM, Itamar Heim wrote: > iordan - maybe wikify for future generations? > I don't see why not! Once I verify the procedure I'll get an account to edit the wiki. Cheers, iordan ___ Users mailing list Users@ovirt.

Re: [Users] replacing self-signed certificates

2013-11-20 Thread Itamar Heim
uot;i iordanov" mailto:iiorda...@gmail.com>> > To: users@ovirt.org <mailto:users@ovirt.org> > Sent: Wednesday, November 20, 2013 6:50:04 PM > Subject: [Users] replacing self-signed certificates > > Hello, > > I searched around but could n

Re: [Users] replacing self-signed certificates

2013-11-20 Thread i iordanov
Thanks Alon and Thomas! iordan On Wed, Nov 20, 2013 at 1:51 PM, Alon Bar-Lev wrote: > > > - Original Message - > > From: "i iordanov" > > To: users@ovirt.org > > Sent: Wednesday, November 20, 2013 6:50:04 PM > > Subject: [Users] repla

Re: [Users] replacing self-signed certificates

2013-11-20 Thread Alon Bar-Lev
- Original Message - > From: "i iordanov" > To: users@ovirt.org > Sent: Wednesday, November 20, 2013 6:50:04 PM > Subject: [Users] replacing self-signed certificates > > Hello, > > I searched around but could not come up with specific instructions fo

Re: [Users] replacing self-signed certificates

2013-11-20 Thread i iordanov
Hi Thomas, Thanks for your response! This goes a long way, however there is still the unknown where ovirt-engine takes the SPICE certificate and CA from. Can somebody confirm that replacing just the files referenced in the apache configuration will be sufficient? Thanks! iordan On Wed, Nov 20,

Re: [Users] replacing self-signed certificates

2013-11-20 Thread Thomas Suckow
I don't know about the native SPICE client, but here is what I did for apache and the websocket proxy: In /etc/httpd/conf.d/ssl.conf it lists SSLCertificateFile SSLCertificateKeyFile SSLCertificateChainFile SSLCACertificateFile Those are the files you need to replace for the web interface. My c

[Users] replacing self-signed certificates

2013-11-20 Thread i iordanov
Hello, I searched around but could not come up with specific instructions for how to replace the self-signed certificates in an oVirt 3.3 setup with non-self-signed certificates. I need to ensure that my oVirt/SPICE client actually does the right thing when connecting to a machine with a 3rd party