Bug 1343878

Summary:	Give a proper message if the browser doesn't trust imageio-proxy
Product:	[oVirt] ovirt-engine	Reporter:	Amit Aviram <aaviram>
Component:	Frontend.WebAdmin	Assignee:	Amit Aviram <aaviram>
Status:	CLOSED CURRENTRELEASE	QA Contact:	Natalie Gavrielov <ngavrilo>
Severity:	medium	Docs Contact:
Priority:	medium
Version:	future	CC:	aaviram, acanan, amureini, bugs, gklein, tnisan, ylavi
Target Milestone:	ovirt-4.0.4	Flags:	ykaul: ovirt-4.0.z? rule-engine: planning_ack? amureini: devel_ack+ rule-engine: testing_ack+
Target Release:	4.0.4
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2016-09-26 12:31:51 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	Storage	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Amit Aviram 2016-06-08 08:31:32 UTC

Description of problem:
While uploading a disk from the webadmin, the browser is using JS for communicating with a remote proxy. The communication is secured with SSL, and the certificate that is provided by the proxy is signed by the engine's CA.

That means that the browser needs to trust that CA for trusting the proxy, so the CA must be installed in the user's browser.

Currently, without installing that CA in the browser- there is no proper message that indicates that the browser doesn't trust the proxy, and when starting the upload, the status of it just goes into "Paused by system"

How reproducible:
100%

Steps to Reproduce:
1. Have an engine running, with ovirt-imageio-proxy installed alongside it.
2. Try uploading a file without adding the engine's CA to the browser.

Actual results:
The status of the disk goes to "Paused by system", and no proper message is delivered to the user.

Expected results:
The status of the disk should go to "Paused by system", and a proper message needs to be delivered.

Comment 1 Amit Aviram 2016-08-17 10:08:48 UTC

Not backported yet

Comment 2 Allon Mureinik 2016-08-31 15:55:54 UTC

Amit, is there anything intelligent to document here, or is it completely obvious?

Comment 3 Amit Aviram 2016-09-01 07:10:48 UTC

No, this is just a message error in audit log, no need to document anything..

Comment 4 Natalie Gavrielov 2016-09-05 13:22:41 UTC

Verified:
Tried to upload an image when certificate is not configured.
*Checked that ovirt-imageio-proxy is up.

Got the following message:
Unable to upload image to disk a386a645-380c-4ade-a47d-db6070d799e9 due to a network error. Make sure ovirt-imageio-proxy service is installed and configured, and ovirt-engine's certificate is registered as a valid CA in the browser.

Builds used:
rhevm-4.0.4-0.1.el7ev.noarch
vdsm-4.18.12-1.el7ev.x86_64
ovirt-imageio-proxy-0.3.0-0.el7ev.noarch
ovirt-imageio-common-0.3.0-0.el7ev.noarch
ovirt-imageio-daemon-0.3.0-0.el7ev.noarch