<div dir="ltr">Hello Wilma,<div class="gmail_extra"><br><div class="gmail_quote">On Thu, Feb 6, 2014 at 6:20 PM, Wilma Hermann <span dir="ltr"><<a href="mailto:wilma.hermann@gmail.com" target="_blank">wilma.hermann@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div><div>There is a really easy fix for that: Get a real certificate from a real CA. You should not use self-signed certs for a production environment.<br>
</div></div></div></blockquote><div><br></div><div>And why is that? Is Verisign's random number generator better than yours? </div><div>A real certificate from a real CA? I don't get that. Last time I checked, my CA</div>
<div>looked pretty real to me, conforming with RFC 5280. And the certificates from the</div><div>browser and VPNs issued by that CA are also real.</div><div><br></div><div>None of the RFCs I've read about PKI don't tell me that I SHOULD NOT use</div>
<div>self signed certs for production environments.</div><div><br></div><div>Your business's image could suffer from a self signed cert but that's another</div><div>story. Technology is technology and it should work either way, be it self signed</div>
<div>or not. </div><div><br></div><div>Best,<br>Valentin </div><div><br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div><div><br></div>Greetings<br>
</div>Wilma<br><div><div><div>
<div class="gmail_extra"><br><br><div class="gmail_quote">2014-02-06 ML mail <span dir="ltr"><<a href="mailto:mlnospam@yahoo.com" target="_blank">mlnospam@yahoo.com</a>></span>:<div><div class="h5"><br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div><div style="font-size:12pt;font-family:HelveticaNeue,Helvetica Neue,Helvetica,Arial,Lucida Grande,sans-serif">This workaround fixes that problem yes but it is not a good workaround especially if you want to offer opennebula to real customers. I hope another better alternative can be found in the future but I am aware that this is mostly a browser problem :|<br>
<br>Regards<br>ML<br><div><span><br></span></div><div style="display:block"> <br> <br> <div style="font-family:HelveticaNeue,Helvetica Neue,Helvetica,Arial,Lucida Grande,sans-serif;font-size:12pt"> <div style="font-family:HelveticaNeue,Helvetica Neue,Helvetica,Arial,Lucida Grande,sans-serif;font-size:12pt">
<div dir="ltr"> <font face="Arial"> On Thursday, February 6, 2014 10:56 AM, Daniel Molina <<a href="mailto:dmolina@opennebula.org" target="_blank">dmolina@opennebula.org</a>> wrote:<br> </font> </div> <div><div><div>
<div dir="ltr">Hi,<div><br clear="none"><br clear="none"><div>On 5 February 2014 16:58, ML mail <span dir="ltr"><<a rel="nofollow" shape="rect" href="mailto:mlnospam@yahoo.com" target="_blank">mlnospam@yahoo.com</a>></span> wrote:<br clear="none">
<blockquote style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><div><div style="font-size:12pt;font-family:HelveticaNeue,'Helvetica Neue',Helvetica,Arial,'Lucida Grande',sans-serif">
Hello,<br clear="none"><br clear="none">I would like to use noVNC in Sunstone over an encrypted channel (WSS). Therefore I have generated my own SSL key and certificate which I have added to the sunstone-server.conf configuration. The problem is that this does not work, when I start VNC from the Sunstone web interface I get the following error message in novnc.log:<br clear="none">
<br clear="none">SSL routines:SSL3_READ_BYTES:tlsv1 alert unknown ca<br clear="none"><br clear="none">Does this mean I need an official SSL certificate?<br clear="none"></div></div></blockquote><div><br clear="none"></div>
<div>Please, check if the solution proposed in this thread, fixes your problem</div>
<div><a rel="nofollow" shape="rect" href="http://lists.opennebula.org/pipermail/users-opennebula.org/2014-February/026405.html" target="_blank">http://lists.opennebula.org/pipermail/users-opennebula.org/2014-February/026405.html</a><br clear="none">
</div><div><br clear="none"></div><div>Cheers</div>
<div><div> </div></div><blockquote style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><div><div style="font-size:12pt;font-family:HelveticaNeue,'Helvetica Neue',Helvetica,Arial,'Lucida Grande',sans-serif">
<div>
<br clear="none">Regards</div><span><font color="#888888"><div><br clear="none">ML</div><br clear="none"></font></span></div></div><br clear="none">_______________________________________________<br clear="none">
Users mailing list<br clear="none">
<a rel="nofollow" shape="rect" href="mailto:Users@lists.opennebula.org" target="_blank">Users@lists.opennebula.org</a><br clear="none">
<a rel="nofollow" shape="rect" href="http://lists.opennebula.org/listinfo.cgi/users-opennebula.org" target="_blank">http://lists.opennebula.org/listinfo.cgi/users-opennebula.org</a><br clear="none">
<br clear="none"></blockquote></div><span><font color="#888888"><br clear="none"><br clear="all"><div><br clear="none"></div>-- <br clear="none"><div dir="ltr"><div>--<br clear="none"></div>Daniel Molina<br clear="none">
Project Engineer<br clear="none">OpenNebula - Flexible Enterprise Cloud Made Simple<br clear="none"><a rel="nofollow" shape="rect" href="http://www.opennebula.org/" target="_blank">www.OpenNebula.org</a> | <a rel="nofollow" shape="rect" href="mailto:dmolina@opennebula.org" target="_blank">dmolina@opennebula.org</a> | @OpenNebula</div>
<div>
</div></font></span></div></div></div></div><br><br></div> </div> </div> </div> </div></div><br>_______________________________________________<br>
Users mailing list<br>
<a href="mailto:Users@lists.opennebula.org" target="_blank">Users@lists.opennebula.org</a><br>
<a href="http://lists.opennebula.org/listinfo.cgi/users-opennebula.org" target="_blank">http://lists.opennebula.org/listinfo.cgi/users-opennebula.org</a><br>
<br></blockquote></div></div></div><br></div></div></div></div></div>
<br>_______________________________________________<br>
Users mailing list<br>
<a href="mailto:Users@lists.opennebula.org">Users@lists.opennebula.org</a><br>
<a href="http://lists.opennebula.org/listinfo.cgi/users-opennebula.org" target="_blank">http://lists.opennebula.org/listinfo.cgi/users-opennebula.org</a><br>
<br></blockquote></div><br><br clear="all"><div><br></div>-- <br><div dir="ltr">Valentin Bud<div><a href="http://databus.pro" target="_blank">http://databus.pro</a> | <a href="mailto:valentin@databus.pro" target="_blank">valentin@databus.pro</a></div>
</div>
</div></div>