10:34 p.m.
hi all
wondering when this security bug is slated to be resolved, its been open
since november 2014
*Bug 1161915* <https://bugzilla.redhat.com/show_bug.cgi?id=1161915> - horizon
console uses http when horizon is set to use ssl
thanks
--
<https://candidate.peoplecert.org/ReportsLink.aspx?argType=1&id=13D642...
*805010942448935*
<https://www.redhat.com/wapps/training/certification/verify.html?certNumbe...
*GR750055912MA*
<https://candidate.peoplecert.org/ReportsLink.aspx?argType=1&id=13D642...
*Link to me on LinkedIn <http://www.linkedin.com/in/mohammedarafa>*
1:14 a.m.
On 19/04/15 05:34, Mohammed Arafa wrote:
hi all
wondering when this security bug is slated to be resolved, its been open
since november 2014
*Bug 1161915* <https://bugzilla.redhat.com/show_bug.cgi?id=1161915>
-horizon console uses http when horizon is set to use ssl
As far as I understand here, it's a local configuration issue on your side.
horizon console url is returned from nova, returning the nova-novnc url.
Please change in your /etc/nova/nova.conf
to something like
novncproxy_base_url=https://192.168.36.10:6080/vnc_auto.html
Matthias
6:16 a.m.
nope didnt work
"connection reset" on both firefox and chrome.
konqueror gave me this:
The requested operation could not be completed
Connection to Server Refused
Details of the Request:
URL:
https://192.168.0.250:6080/vnc_auto.html?token=51cdd3d1-7044-4f2d-9112-7b...
Protocol: https
Date and Time: Monday, April 20, 2015 07:15 AM
Additional Information: 192.168.0.250: SSL negotiation failed
Description:
The server <strong>192.168.0.250</strong> refused to allow this computer to
make a connection.
Possible Causes:
The server, while currently connected to the Internet, may not be
configured to allow requests.
The server, while currently connected to the Internet, may not be running
the requested service (https).
A network firewall (a device which restricts Internet requests), either
protecting your network or the network of the server, may have intervened,
preventing this request.
Possible Solutions:
Try again, either now or at a later time.
Contact the administrator of the server for further assistance.
Contact your appropriate computer support system, whether the system
administrator, or technical support group for further assistance.
On Mon, Apr 20, 2015 at 2:14 AM, Matthias Runge <mrunge(a)redhat.com> wrote:
On 19/04/15 05:34, Mohammed Arafa wrote:
> hi all
>
> wondering when this security bug is slated to be resolved, its been open
> since november 2014
> *Bug 1161915* <https://bugzilla.redhat.com/show_bug.cgi?id=1161915>
> -horizon console uses http when horizon is set to use ssl
>
> As far as I understand here, it's a local configuration issue on your
side.
horizon console url is returned from nova, returning the nova-novnc url.
Please change in your /etc/nova/nova.conf
to something like
novncproxy_base_url=https://192.168.36.10:6080/vnc_auto.html
Matthias
_______________________________________________
Rdo-list mailing list
Rdo-list(a)redhat.com
https://www.redhat.com/mailman/listinfo/rdo-list
To unsubscribe: rdo-list-unsubscribe(a)redhat.com
--
<https://candidate.peoplecert.org/ReportsLink.aspx?argType=1&id=13D642...
*805010942448935*
<https://www.redhat.com/wapps/training/certification/verify.html?certNumbe...
*GR750055912MA*
<https://candidate.peoplecert.org/ReportsLink.aspx?argType=1&id=13D642...
*Link to me on LinkedIn <http://www.linkedin.com/in/mohammedarafa>*
8:43 a.m.
Mohammed Arafa wrote:
nope didnt work
"connection reset" on both firefox and chrome.
konqueror gave me this:
The requested operation could not be completed
Connection to Server Refused
The novnc proxy needs to be started in SSL mode, so provided with a cert
and key (and IIRC there is an option to enable SSL).
rob
8:59 a.m.
this is in packstack answer file. there is no mention of vnc
CONFIG_HORIZON_SSL=y
# PEM encoded certificate to be used for ssl on the https server,
# leave blank if one should be generated, this certificate should not
# require a passphrase
CONFIG_SSL_CERT=
# SSL keyfile corresponding to the certificate if one was entered
CONFIG_SSL_KEY=
# PEM encoded CA certificates from which the certificate chain of the
# server certificate can be assembled.
CONFIG_SSL_CACHAIN=
On Mon, Apr 20, 2015 at 9:43 AM, Rob Crittenden <rcritten(a)redhat.com> wrote:
Mohammed Arafa wrote:
> nope didnt work
>
> "connection reset" on both firefox and chrome.
>
> konqueror gave me this:
> The requested operation could not be completed
>
> Connection to Server Refused
The novnc proxy needs to be started in SSL mode, so provided with a cert
and key (and IIRC there is an option to enable SSL).
rob
--
<https://candidate.peoplecert.org/ReportsLink.aspx?argType=1&id=13D642...
*805010942448935*
<https://www.redhat.com/wapps/training/certification/verify.html?certNumbe...
*GR750055912MA*
<https://candidate.peoplecert.org/ReportsLink.aspx?argType=1&id=13D642...
*Link to me on LinkedIn <http://www.linkedin.com/in/mohammedarafa>*
9:29 a.m.
Mohammed Arafa wrote:
this is in packstack answer file. there is no mention of vnc
CONFIG_HORIZON_SSL=y
# PEM encoded certificate to be used for ssl on the https server,
# leave blank if one should be generated, this certificate should not
# require a passphrase
CONFIG_SSL_CERT=
# SSL keyfile corresponding to the certificate if one was entered
CONFIG_SSL_KEY=
# PEM encoded CA certificates from which the certificate chain of the
# server certificate can be assembled.
CONFIG_SSL_CACHAIN=
Just trying to be helpful. You'd need to configure this post-install.
I've never actually tried securing this particular service so I don't
know if there be dragons or not.
rob
3294
days inactive
3295
days old
5 comments
3 participants
participants (3)
-
Matthias Runge -
Mohammed Arafa -
Rob Crittenden