我昨天安装了最新的 CentOS 7。干净安装。我遵循本教程: https ://www.ovirt.org/documentation/install-guide/chap-Installing_oVirt.html
唯一不同的是我为 http 配置了 httpd listen 1080,为 https 配置了 1443。因为我之前安装了nginx。如果主机名正确,我将 nginx 重定向 443 配置为 1443 端口。
但在“连接到管理门户”步骤中,出现错误:
sun.security.validator.ValidatorException: PKIX path building failed:
sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
https://i.imgur.com/bnTwTDK.png
我尝试了很多解决方案,但没有一个有效。
尝试解决方案_1:
cat /etc/ovirt-engine/engine.conf.d/99-custom-truststore.conf
ENGINE_HTTPS_PKI_TRUST_STORE="/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.191.b12-1.el7_6.x86_64/jre/lib/security/cacerts"
ENGINE_HTTPS_PKI_TRUST_STORE_PASSWORD="changeit"
https://i.imgur.com/uAbJmfn.png 不起作用。
尝试解决方案_2:
手动将证书添加到密钥库:
for f in *.pem; do keytool -import -trustcacerts -keystore /etc/pki/java/cacerts -storepass changeit -alias "$f" -import -file "$f"; done
for f in *.cer; do keytool -import -trustcacerts -keystore /etc/pki/java/cacerts -storepass changeit -alias "$f" -import -file "$f"; done
for f in *.der; do keytool -import -trustcacerts -keystore /etc/pki/java/cacerts -storepass changeit -alias "$f" -import -file "$f"; done
#/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.191.b12-1.el7_6.x86_64/jre/lib/security/cacerts is linked to /etc/pki/java/cacerts
我在 /etc/pki/ovirt-engine/ 下的任何地方都运行此脚本,但它仍然无法正常工作。