Comments (7)
When you add the server to XO, there's a button to enable "Unauthorized Certificates". Did you try that?
If you need custom CA, you should be able to mount a volume to your containers /etc/ssl/certs
E: actually latter most likely doesn't work out of the box as that use-openssl-ca option isn't set. So not supported/tested currently in this container.
from xen-orchestra-docker.
Hi,
Yes, it will work if I enable "Unauthorized Certificates". But that will make the connection between XO and XCP-NG unsecure.
I can mount a volume then add my custom CA to /etc/ssl/certs. But I can't figure out how to set the "use-openssl-ca" option.
Hopefully, this can be cosidered an option on future versions for this container. Possibly make it available as an env variable that can be set for the container?
Thanks
-Mario
from xen-orchestra-docker.
Hi,
No it doesn't, traffic is as much encrypted as it would be with a trusted CA. As XO documentation says, if you manage your own CA, using this feature might make sense. Something like that is usually used in bigger business environments where you'd have multiple hosts and want to centrally manage issuing and lifetime of those certificates. Sure it adds a level of security by blocking traffic if CA doesn't match, but doesn't change the way XO and host communicate in any way.
Sure i can take a look if this can be implemented into the container.
from xen-orchestra-docker.
Ok thanks. I did enable "Unauthorized Certificates" for now. Would be cool to expose this option as container variables. Thanks for looking into this.
from xen-orchestra-docker.
I added an option to define custom CA inside container. Just mount your CA as a file to /host-ca.pem
inside the container (added to docker-compose.yml example). You need to pull latest version of container for this to work once this job completes: https://github.com/ronivay/xen-orchestra-docker/actions/runs/2218652889
Let me know how it works. The other use-openssl-ca
option would've required quite a hacky solution so i opted to mounting a single CA file (can contain multiple certificates) inside the container instead which expands node.js builtin CA list.
from xen-orchestra-docker.
Hi Roni, that worked like a charm. thanks.
from xen-orchestra-docker.
Awesome, thank you.
from xen-orchestra-docker.
Related Issues (20)
- Custom cert definition, script error HOT 3
- Unraid Docker template HOT 2
- Container does not start HOT 3
- invalid credentials HOT 6
- The latest image (5.100.1) is not working HOT 13
- arm64 build failing HOT 9
- Full backup of VM is failing after 5.100.1 HOT 4
- Build didn't run due to repo inactivity. HOT 2
- NTFS support? HOT 3
- File Restore Not Working HOT 6
- Is it necessary to register with XOA in the cloud to use this container? HOT 3
- issue with remotes HOT 2
- Issue with Google oAuth and container version 5.120.2 HOT 2
- docker build 5.132.0 with issues HOT 3
- Request: Latest-official tag HOT 1
- filelevel restore with XFS and LVM HOT 5
- Can't mount nfs remote (In XO / Settings / Remotes ) HOT 3
- Cannot start container as of today HOT 2
- Unable to change the 80 port HOT 8
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from xen-orchestra-docker.