Re: Certificate verification error for qemu while migrating
On Thu, Jul 04, 2024 at 10:03:23AM -0000, jdeberles(a)gmail.com wrote:
Hello,
I'm running ovirt 4.4.10 (using libvirt 7.10.0-1.module_el8.6.0+1046+bd8eec5e) and I
have the following qemu error while I launch a VM migration
Jul 3 12:37:07myhostname1 journal[958949]: Certificate [session] owner does not match
the hostname myhostname2
Jul 3 12:37:07 myhostname1journal[958949]: Certificate check failed Certificate
[session] owner does not match the hostname myhostname2
Jul 3 12:37:07 myhostname1 journal[958949]: authentication failed: Failed to verify
peer's certificate
Jul 3 12:37:07myhostname1 journal[958949]: operation failed: Failed to connect to
remote
libvirt URI qemu+tls://myhostname3/system: authentication failed: Failed to verify
peer's certificate
This error comes from the libvirtd connection, whose behaviuor is
controlled in /etc/libvirt/libvirtd.conf
To avoid this error I set the following paramaters inside the
/etc/libvirt/qemu.conf and
restard vdsmd and libvirtd daemons.
migrate_tls_x509_verify = 0
default_tls_x509_verify = 0
There parameters apply to QEMU, not libvirtd, hence having no effect on
the above error.
With regards,
Daniel
--
|: https://berrange.com -o- https://www.flickr.com/photos/dberrange :|
|: https://libvirt.org -o- https://fstop138.berrange.com :|
|: https://entangle-photo.org -o- https://www.instagram.com/dberrange :|