[Fiware-lab-help] Fwd: Cloud Portal issue

[Javier Cerviño]

Hi,

Thomas, I think Federico's solution would be easiest for IOs, as long as we
can't use self-signed certificates. Actually I think other services will
need to use these SSL certificates sooner rather than later.

Cheers,
Javier.


On 31 July 2014 09:43, Günther, Thomas <thomas.guenther at fokus.fraunhofer.de>
wrote:

>  Hi Javier and Federico,
>
>
>
> where does the IOs get the SSL certificates from? Will there a FI-Lab/XIFI
> CA that is issuing the certs, or are we going for self-signed SSL
> certificates by the IOs?
>
>
>
> Thanks in advance for clarification,
>
>
>
> Thomas
>
>
>
> *Von:* fiware-lab-help-bounces at lists.fi-ware.org [mailto:
> fiware-lab-help-bounces at lists.fi-ware.org] *Im Auftrag von *Javier Cerviño
> *Gesendet:* Donnerstag, 31. Juli 2014 09:00
> *An:* Federico Michele Facca
> *Cc:* Cristian Cristelotti; fiware-lab-help at lists.fi-ware.org
> *Betreff:* Re: [Fiware-lab-help] Fwd: Cloud Portal issue
>
>
>
> Hi all,
>
>
>
> Due to FI-LAB security requirements Cloud Portal now listens on HTTPS. The
> problem with VNC Proxy is that it works on HTTP by default and web browsers
> restrict access to HTTP services from HTTPS web pages. So the best solution
> is to bind VNC Proxies (part of Openstack Nova) to HTTPS (using a trusted
> SSL certificate). So this work should be done by each node in the
> corresponding Openstack Nova.
>
>
>
> Cheers,
>
> Javier.
>
>
>
> On 29 July 2014 15:09, Federico Michele Facca <
> federico.facca at create-net.org> wrote:
>
>  as discussed in today call in xifi, UPM-DIT is aware of the issue and
> will propose a solution
>
>
>
> On Tue, Jul 29, 2014 at 3:06 PM, Cristian Cristelotti <
> cristian.cristelotti.coll at trentinonetwork.it> wrote:
>
>  More details about the issue :
> if I create the screen from the shell I get the address and it works well :
> root at node-2:/tmp/images# nova get-vnc-console
> 6f71004a-83b2-44ff-9a8d-2af96916d0a1 novnc
>
> +-------+-------------------------------------------------------------------------------------+
> | Type  | Url
>                     |
>
> +-------+-------------------------------------------------------------------------------------+
> | novnc |
> http://193.205.211.65:6080/vnc_auto.html?token=e2361e1a-d9a4-4f20-8f2e-0b2f07f5af3b
> |
>
> +-------+-------------------------------------------------------------------------------------+
>
>
> http://193.205.211.65:6080/vnc_auto.html?token=e2361e1a-d9a4-4f20-8f2e-0b2f07f5af3b
>
>
> But when I try to open the Virtual Machine Display from the portal I get a
> blank page and the log shows :
>
> 13: Traceback (most recent call last):
>   File "/usr/lib/python2.7/dist-packages/websockify/websocket.py", line
> 797, in top_new_client
>     self.new_client()
>   File "/usr/lib/python2.7/dist-packages/nova/console/websocketproxy.py",
> line 59, in new_client
>     raise Exception(_("Invalid Token"))
> Exception: Invalid Token
>
> Attached you can find the response from the portal.
>
> Thanks
>
> Cristian
>
> ----- Messaggio inoltrato -----
> Da: "Cristian Cristelotti" <cristian.cristelotti.coll at trentinonetwork.it>
> A: fiware-lab-help at lists.fi-ware.org
> Cc: support-xifi at trentinonetwork.it
> Inviato: Martedì, 29 luglio 2014 14:56:54
> Oggetto: Cloud Portal issue
>
>
> Dear Support,
>
> here in Trento we are experiencing a problem regarding the Virtual Machine
> Display.
>
>
> Any other Node is facing the same issue?
>
>
> Thanks
>
> Best Regards
>
> Cristian
>
>
> --
> Cristian Cristelotti
> Area Sistemi Informativi
> Direzione Tecnica Tecnologie e Sistemi
> TRENTINO NETWORK S.R.L.
> Via G.Pedrotti, 18 - 38121 - TRENTO
> Tel (+39) 0461.020200
> Fax (+39) 0461.020201
>
> --
> Cristian Cristelotti
> Area Sistemi Informativi
> Direzione Tecnica Tecnologie e Sistemi
> TRENTINO NETWORK S.R.L.
> Via G.Pedrotti, 18 - 38121 - TRENTO
> Tel (+39) 0461.020200
> Fax (+39) 0461.020201
>
>
>
> _______________________________________________
> Fiware-lab-help mailing list
> Fiware-lab-help at lists.fi-ware.org
> https://lists.fi-ware.org/listinfo/fiware-lab-help
>
>
>
>
>
> --
> Dr. Federico M. Facca
>
> CREATE-NET
> Via alla Cascata 56/D
> 38123 Povo Trento (Italy)
>
> T  +39 0461 408400 (1669)
> F  +39 0461 421157
>
> M +39 334 6049758
> E  federico.facca at create-net.org
> W  www.create-net.org
>
>
> _______________________________________________
> Fiware-lab-help mailing list
> Fiware-lab-help at lists.fi-ware.org
> https://lists.fi-ware.org/listinfo/fiware-lab-help
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fiware.org/private/fiware-lab-help/attachments/20140731/578edd39/attachment.html>