Bug 1343878 - Give a proper message if the browser doesn't trust imageio-proxy
Summary: Give a proper message if the browser doesn't trust imageio-proxy
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: ovirt-engine
Classification: oVirt
Component: Frontend.WebAdmin
Version: future
Hardware: Unspecified
OS: Unspecified
medium
medium
Target Milestone: ovirt-4.0.4
: 4.0.4
Assignee: Amit Aviram
QA Contact: Natalie Gavrielov
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2016-06-08 08:31 UTC by Amit Aviram
Modified: 2016-09-26 12:31 UTC (History)
7 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2016-09-26 12:31:51 UTC
oVirt Team: Storage
Embargoed:
ykaul: ovirt-4.0.z?
rule-engine: planning_ack?
amureini: devel_ack+
rule-engine: testing_ack+


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
oVirt gerrit 62019 0 master MERGED core+webadmin: Audit log a network error while uploading disk. 2016-08-17 08:42:57 UTC
oVirt gerrit 62413 0 ovirt-engine-4.0 MERGED webadmin: Don't call finazlize on image upload progress. 2016-08-18 10:21:35 UTC
oVirt gerrit 62414 0 ovirt-engine-4.0 MERGED webadmin: upload model: Save disk's Guid, not its String. 2016-08-18 10:21:18 UTC
oVirt gerrit 62415 0 ovirt-engine-4.0 MERGED core+webadmin: Audit log a network error while uploading disk. 2016-08-18 10:21:45 UTC

Description Amit Aviram 2016-06-08 08:31:32 UTC
Description of problem:
While uploading a disk from the webadmin, the browser is using JS for communicating with a remote proxy. The communication is secured with SSL, and the certificate that is provided by the proxy is signed by the engine's CA.

That means that the browser needs to trust that CA for trusting the proxy, so the CA must be installed in the user's browser.

Currently, without installing that CA in the browser- there is no proper message that indicates that the browser doesn't trust the proxy, and when starting the upload, the status of it just goes into "Paused by system"

How reproducible:
100%

Steps to Reproduce:
1. Have an engine running, with ovirt-imageio-proxy installed alongside it.
2. Try uploading a file without adding the engine's CA to the browser.

Actual results:
The status of the disk goes to "Paused by system", and no proper message is delivered to the user.

Expected results:
The status of the disk should go to "Paused by system", and a proper message needs to be delivered.

Comment 1 Amit Aviram 2016-08-17 10:08:48 UTC
Not backported yet

Comment 2 Allon Mureinik 2016-08-31 15:55:54 UTC
Amit, is there anything intelligent to document here, or is it completely obvious?

Comment 3 Amit Aviram 2016-09-01 07:10:48 UTC
No, this is just a message error in audit log, no need to document anything..

Comment 4 Natalie Gavrielov 2016-09-05 13:22:41 UTC
Verified:
Tried to upload an image when certificate is not configured.
*Checked that ovirt-imageio-proxy is up.

Got the following message:
Unable to upload image to disk a386a645-380c-4ade-a47d-db6070d799e9 due to a network error. Make sure ovirt-imageio-proxy service is installed and configured, and ovirt-engine's certificate is registered as a valid CA in the browser.

Builds used:
rhevm-4.0.4-0.1.el7ev.noarch
vdsm-4.18.12-1.el7ev.x86_64
ovirt-imageio-proxy-0.3.0-0.el7ev.noarch
ovirt-imageio-common-0.3.0-0.el7ev.noarch
ovirt-imageio-daemon-0.3.0-0.el7ev.noarch


Note You need to log in before you can comment on or make changes to this bug.