You are viewing a plain text version of this content. The canonical link for it is here.

Posted to users@cloudstack.apache.org by Granwille Strauss <gr...@namhost.com.INVALID> on 2022/09/19 20:54:41 UTC

SSL Encryption for SSVM & Console

Hi Guys

I am using 4.17 CM and I am trying to secure SSVM & Console. I have a
wildcard certificate, that should cover CM, SSVM & Console without any
issues. In CM UI, I have uploaded my CRT, PKCS8 Key and for the domain
suffix I have *.domain.com in place.

In global config, I have set the following:

- consoleproxy.url.domain: console.domain.com & I have tested *.domain.com
- consoleproxy.sslEnabled: true
- secstorage.ssl.cert.domain: ssvm.domain.com & I have tested *.domain.com
- secstorage.encrypt.copy: true

Regardless of the domain settings, my console agent fails to connect.
SSVM works perfectly fine whether I use ssvm.domain.com or *.domain.com
in global setting. I have destroyed console vm hoping for it to load
certificate with no luck.

Are there any suggestion on how I can fix this, please?

--
Regards / Groete

<https://www.namhost.com> Granwille Strauss // Senior Systems Admin

*e:* granwille@namhost.com
*m:* +264 81 323 1260 <tel:+264813231260>
*w:* www.namhost.com <https://www.namhost.com/>

<https://www.facebook.com/namhost><https://twitter.com/namhost><https://www.instagram.com/namhostinternetservices/><https://www.linkedin.com/company/namhos><https://www.youtube.com/channel/UCTd5v-kVPaic_dguGur15AA>

<https://www.adsigner.com/v1/l/631091998d4670001fe43ec2/621c9b76c140bb001ed0f818/banner>

Namhost Internet Services (Pty) Ltd,

24 Black Eagle Rd, Hermanus, 7210, RSA

The content of this message is confidential. If you have received it by
mistake, please inform us by email reply and then delete the message. It
is forbidden to copy, forward, or in any way reveal the contents of this
message to anyone without our explicit consent. The integrity and
security of this email cannot be guaranteed over the Internet.
Therefore, the sender will not be held liable for any damage caused by
the message. For our full privacy policy and disclaimers, please go to
https://www.namhost.com/privacy-policy

Re: SSL Encryption for SSVM & Console

Posted by Granwille Strauss <gr...@namhost.com.INVALID>.

Hi

I managed to solve the issue, it seems the root certificate was not 
fully uploaded, which caused the issue. But, yes essentially I could 
reach SSVM but not CPVM. But the issue has since been resolved, thank you.

On 9/26/22 09:57, Daan Hoogland wrote:
> sorry for the lack of understanding your question..,
> are you saying you can reach the SSVM but not the CPVM?
>
> On Mon, Sep 19, 2022 at 10:55 PM Granwille Strauss
> <gr...@namhost.com.invalid>  wrote:
>
>> Hi Guys
>>
>> I am using 4.17 CM and I am trying to secure SSVM & Console. I have a
>> wildcard certificate, that should cover CM, SSVM & Console without any
>> issues. In CM UI, I have uploaded my CRT, PKCS8 Key and for the domain
>> suffix I have *.domain.com in place.
>>
>> In global config, I have set the following:
>>
>> - consoleproxy.url.domain: console.domain.com & I have tested *.domain.com
>> - consoleproxy.sslEnabled: true
>> - secstorage.ssl.cert.domain: ssvm.domain.com & I have tested *.domain.com
>> - secstorage.encrypt.copy: true
>>
>> Regardless of the domain settings, my console agent fails to connect. SSVM
>> works perfectly fine whether I use ssvm.domain.com or *.domain.com in
>> global setting. I have destroyed console vm hoping for it to load
>> certificate with no luck.
>>
>> Are there any suggestion on how I can fix this, please?
>> --
>> Regards / Groete
>>
>> <https://www.namhost.com>  Granwille Strauss  //  Senior Systems Admin
>>
>> *e:*granwille@namhost.com
>> *m:* +264 81 323 1260 <+264813231260>
>> *w:*www.namhost.com
>>
>> <https://www.facebook.com/namhost>  <https://twitter.com/namhost>
>> <https://www.instagram.com/namhostinternetservices/>
>> <https://www.linkedin.com/company/namhos>
>> <https://www.youtube.com/channel/UCTd5v-kVPaic_dguGur15AA>
>>
>>
>> <https://www.adsigner.com/v1/l/631091998d4670001fe43ec2/621c9b76c140bb001ed0f818/banner>
>>
>> Namhost Internet Services (Pty) Ltd,
>>
>> 24 Black Eagle Rd, Hermanus, 7210, RSA
>>
>>
>>
>> The content of this message is confidential. If you have received it by
>> mistake, please inform us by email reply and then delete the message. It is
>> forbidden to copy, forward, or in any way reveal the contents of this
>> message to anyone without our explicit consent. The integrity and security
>> of this email cannot be guaranteed over the Internet. Therefore, the sender
>> will not be held liable for any damage caused by the message. For our full
>> privacy policy and disclaimers, please go to
>> https://www.namhost.com/privacy-policy
>>
>> [image: Powered by AdSigner]
>> <https://www.adsigner.com/v1/c/631091998d4670001fe43ec2/621c9b76c140bb001ed0f818>
>>
>
-- 
Regards / Groete

<https://www.namhost.com> 	Granwille Strauss  // Senior Systems Admin

*e:* granwille@namhost.com
*m:* +264 81 323 1260 <tel:+264813231260>
*w:* www.namhost.com <https://www.namhost.com/>

<https://www.facebook.com/namhost><https://twitter.com/namhost><https://www.instagram.com/namhostinternetservices/><https://www.linkedin.com/company/namhos><https://www.youtube.com/channel/UCTd5v-kVPaic_dguGur15AA>

<https://www.adsigner.com/v1/l/631091998d4670001fe43ec2/621c9b76c140bb001ed0f818/banner>

Namhost Internet Services (Pty) Ltd,

24 Black Eagle Rd, Hermanus, 7210, RSA



The content of this message is confidential. If you have received it by 
mistake, please inform us by email reply and then delete the message. It 
is forbidden to copy, forward, or in any way reveal the contents of this 
message to anyone without our explicit consent. The integrity and 
security of this email cannot be guaranteed over the Internet. 
Therefore, the sender will not be held liable for any damage caused by 
the message. For our full privacy policy and disclaimers, please go to 
https://www.namhost.com/privacy-policy

Powered by AdSigner 
<https://www.adsigner.com/v1/c/631091998d4670001fe43ec2/621c9b76c140bb001ed0f818>

Re: SSL Encryption for SSVM & Console

Posted by Daan Hoogland <da...@gmail.com>.

sorry for the lack of understanding your question..,
are you saying you can reach the SSVM but not the CPVM?

On Mon, Sep 19, 2022 at 10:55 PM Granwille Strauss
<gr...@namhost.com.invalid> wrote:

> Hi Guys
>
> I am using 4.17 CM and I am trying to secure SSVM & Console. I have a
> wildcard certificate, that should cover CM, SSVM & Console without any
> issues. In CM UI, I have uploaded my CRT, PKCS8 Key and for the domain
> suffix I have *.domain.com in place.
>
> In global config, I have set the following:
>
> - consoleproxy.url.domain: console.domain.com & I have tested *.domain.com
> - consoleproxy.sslEnabled: true
> - secstorage.ssl.cert.domain: ssvm.domain.com & I have tested *.domain.com
> - secstorage.encrypt.copy: true
>
> Regardless of the domain settings, my console agent fails to connect. SSVM
> works perfectly fine whether I use ssvm.domain.com or *.domain.com in
> global setting. I have destroyed console vm hoping for it to load
> certificate with no luck.
>
> Are there any suggestion on how I can fix this, please?
> --
> Regards / Groete
>
> <https://www.namhost.com> Granwille Strauss  //  Senior Systems Admin
>
> *e:* granwille@namhost.com
> *m:* +264 81 323 1260 <+264813231260>
> *w:* www.namhost.com
>
> <https://www.facebook.com/namhost> <https://twitter.com/namhost>
> <https://www.instagram.com/namhostinternetservices/>
> <https://www.linkedin.com/company/namhos>
> <https://www.youtube.com/channel/UCTd5v-kVPaic_dguGur15AA>
>
>
> <https://www.adsigner.com/v1/l/631091998d4670001fe43ec2/621c9b76c140bb001ed0f818/banner>
>
> Namhost Internet Services (Pty) Ltd,
>
> 24 Black Eagle Rd, Hermanus, 7210, RSA
>
>
>
> The content of this message is confidential. If you have received it by
> mistake, please inform us by email reply and then delete the message. It is
> forbidden to copy, forward, or in any way reveal the contents of this
> message to anyone without our explicit consent. The integrity and security
> of this email cannot be guaranteed over the Internet. Therefore, the sender
> will not be held liable for any damage caused by the message. For our full
> privacy policy and disclaimers, please go to
> https://www.namhost.com/privacy-policy
>
> [image: Powered by AdSigner]
> <https://www.adsigner.com/v1/c/631091998d4670001fe43ec2/621c9b76c140bb001ed0f818>
>


-- 
Daan