{"id":3469,"date":"2018-02-09T09:43:00","date_gmt":"2018-02-09T08:43:00","guid":{"rendered":"https:\/\/vm.piszki.pl\/?p=3469"},"modified":"2018-02-09T09:43:00","modified_gmt":"2018-02-09T08:43:00","slug":"vmware-integrated-containers-1-3-html5-plugin-ssl-hadshake-error-pl","status":"publish","type":"post","link":"https:\/\/vm.piszki.pl\/?p=3469","title":{"rendered":"VMware Integrated Containers 1.3 – HTML5 Plugin SSL Hadshake error (PL)"},"content":{"rendered":"

Jedn\u0105 z g\u0142\u00f3wnych nowo\u015bci w VMware Integrated Containers 1.3 (VIC) jest rozbudowany plugin do vSphere Client UI (html5) za pomoc\u0105 kt\u00f3rego mo\u017cna skonfigurowa\u0107 i uruchomi\u0107 VMware Container Host (VCH). Plugin ten jest uzale\u017cniony od prawid\u0142owej konfiguracji SSL w vCenter. I tutaj pojawia si\u0119 temat rzeka, co to jest prawid\u0142owa konfiguracja? Jak si\u0119 okazuje, ka\u017cdy kto wygenerowa\u0142 sobie certyfikaty z VMCA podpisanego przez Root CA ma konfiguracj\u0119 prawie dobr\u0105. Gdzie pojawia si\u0119 problem, opisz\u0119 ni\u017cej.<\/p>\n

\"vic-product\"<\/a><\/p>\n

<\/p>\n

Zaczniemy od podstaw, uruchomili\u015bmy VIC zgodnie z instrukcj\u0105, plugin zosta\u0142 wgrany poprawnie ale nie dzia\u0142a (nie pokazuje \u017cadnej zawarto\u015bci). W logu:<\/p>\n

\/storage\/log\/vmware\/vsphere-ui\/logs\/vsphere_client_virgo.log<\/p>\n

Pojawia si\u0119 komunikat (plus wiele innych):<\/p>\n

Caused by: javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: Server certificate chain is not trusted and thumbprint doesn’t match<\/p>\n

Problem ten dotkn\u0105\u0142 wielu ludzi<\/a>, po d\u0142ugim dochodzeniu okaza\u0142o si\u0119, \u017ce problemem jest certyfikat CA (Root lub VMCA) doklejany do certyfikatu maszyny. Wchodz\u0105c na adres https:\/\/vCenter\/psc mo\u017cemy przejrze\u0107 aktualn\u0105 zawarto\u015b\u0107 VMware VECS, w tym stor __MACHINE_CERT:<\/p>\n

\"vic2\"<\/a><\/p>\n

Jak wida\u0107 __MACHINE_CERT zawiera opr\u00f3cz certyfikatu maszyny tak\u017ce certyfikat CA (VMCA) kt\u00f3re podpisa\u0142o ten certyfikat. I jest to sytuacje nie prawid\u0142owa. Niestety, aby poprawi\u0107 ten problem, nale\u017cy ponownie wygenerowa\u0107 (je\u015bli nie mamy starego) lub ponownie wgra\u0107 posiadany certyfikat bez certyfiaktu CA. Prawid\u0142owo wygl\u0105da to tak:<\/p>\n

\"vic1\"<\/a><\/p>\n

Od tego momentu wszystkie operacje wykonywane z poziomu VIC html5 plugin b\u0119d\u0105 dzia\u0142a\u0142y bez najmniejszego problemu.<\/p>\n

\"vic3\"<\/a><\/p>\n

<\/div>","protected":false},"excerpt":{"rendered":"

Jedn\u0105 z g\u0142\u00f3wnych nowo\u015bci w VMware Integrated Containers 1.3 (VIC) jest rozbudowany plugin do vSphere Client UI (html5) za pomoc\u0105 kt\u00f3rego mo\u017cna skonfigurowa\u0107 i uruchomi\u0107 VMware Container Host (VCH). Plugin ten jest uzale\u017cniony od prawid\u0142owej konfiguracji SSL w vCenter. I … Continue reading →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":3424,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"yasr_overall_rating":0,"yasr_post_is_review":"","yasr_auto_insert_disabled":"","yasr_review_type":"","footnotes":""},"categories":[36],"tags":[41,119],"class_list":["post-3469","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-analiza","tag-ssl","tag-vic"],"yasr_visitor_votes":{"stars_attributes":{"read_only":false,"span_bottom":false},"number_of_votes":0,"sum_votes":0},"_links":{"self":[{"href":"https:\/\/vm.piszki.pl\/index.php?rest_route=\/wp\/v2\/posts\/3469"}],"collection":[{"href":"https:\/\/vm.piszki.pl\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/vm.piszki.pl\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/vm.piszki.pl\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/vm.piszki.pl\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=3469"}],"version-history":[{"count":3,"href":"https:\/\/vm.piszki.pl\/index.php?rest_route=\/wp\/v2\/posts\/3469\/revisions"}],"predecessor-version":[{"id":3472,"href":"https:\/\/vm.piszki.pl\/index.php?rest_route=\/wp\/v2\/posts\/3469\/revisions\/3472"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/vm.piszki.pl\/index.php?rest_route=\/wp\/v2\/media\/3424"}],"wp:attachment":[{"href":"https:\/\/vm.piszki.pl\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=3469"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/vm.piszki.pl\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=3469"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/vm.piszki.pl\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=3469"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}