Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 1181030

Summary:	[RFE] [3.6.1] add possibility to sign websocket proxy ticket
Product:	[oVirt] ovirt-engine	Reporter:	Tomas Jelinek <tjelinek>
Component:	RestAPI	Assignee:	jniederm
Status:	CLOSED CURRENTRELEASE	QA Contact:	Petr Kubica <pkubica>
Severity:	medium	Docs Contact:
Priority:	high
Version:	---	CC:	bugs, gklein, iheim, juan.hernandez, lsurette, michal.skrivanek, rbalakri, yeylon, ykaul
Target Milestone:	ovirt-3.6.0-rc	Keywords:	FutureFeature
Target Release:	3.6.0	Flags:	rule-engine: ovirt-3.6.0+ ylavi: planning_ack+ rule-engine: devel_ack+ pstehlik: testing_ack+
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	3.6.0-4_alpha3	Doc Type:	Enhancement
Doc Text:	Feature: REST API can provide ticket allowing connection to websocket proxy POST /vms/{vmid}/graphicsconsoles/{consoleid}/proxyticket <action/> - <action> <proxy_ticket> <value>ticket_content</value> </proxy_ticket> </action> Reason: Result:	Story Points:	---
Clone Of:		Environment:
Last Closed:	2016-02-10 12:49:15 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	Virt	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	1132506

Description Tomas Jelinek 2015-01-12 09:02:06 UTC

When connecting to a websocket proxy using a SPICE HTML5 or noVNC, the websocket proxy needs to get the websocket proxy ticket (host, port, ssl_target) signed using the engine's certificate. The web clients (webadmin/userportal) are using a custom GWT RPC query (SignStringQuery) which is not exposed to REST API. 

The problem is that currently no other client than webadmin or userportal is able to open a SPICE HTML5 nor noVNC since we can not generate the signed ticket without the proper REST support.

Comment 1 Michal Skrivanek 2015-05-21 08:40:13 UTC

this is required for moVirt console integration too

Comment 2 Petr Kubica 2016-02-09 09:59:18 UTC

Verified in rhevm-3.6.3-0.1