{"action":"created","issue":{"url":"https://api.github.com/repos/EGI-FCTF/rOCCI-cli/issues/17","labels_url":"https://api.github.com/repos/EGI-FCTF/rOCCI-cli/issues/17/labels{/name}","comments_url":"https://api.github.com/repos/EGI-FCTF/rOCCI-cli/issues/17/comments","events_url":"https://api.github.com/repos/EGI-FCTF/rOCCI-cli/issues/17/events","html_url":"https://github.com/EGI-FCTF/rOCCI-cli/issues/17","id":115344568,"number":17,"title":"Doubt about VOMs authentication","user":{"login":"giovannifs","id":6718611,"avatar_url":"https://avatars.githubusercontent.com/u/6718611?v=3","gravatar_id":"","url":"https://api.github.com/users/giovannifs","html_url":"https://github.com/giovannifs","followers_url":"https://api.github.com/users/giovannifs/followers","following_url":"https://api.github.com/users/giovannifs/following{/other_user}","gists_url":"https://api.github.com/users/giovannifs/gists{/gist_id}","starred_url":"https://api.github.com/users/giovannifs/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/giovannifs/subscriptions","organizations_url":"https://api.github.com/users/giovannifs/orgs","repos_url":"https://api.github.com/users/giovannifs/repos","events_url":"https://api.github.com/users/giovannifs/events{/privacy}","received_events_url":"https://api.github.com/users/giovannifs/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/EGI-FCTF/rOCCI-cli/labels/question","name":"question","color":"cc317c"}],"state":"closed","locked":false,"assignee":{"login":"arax","id":513793,"avatar_url":"https://avatars.githubusercontent.com/u/513793?v=3","gravatar_id":"","url":"https://api.github.com/users/arax","html_url":"https://github.com/arax","followers_url":"https://api.github.com/users/arax/followers","following_url":"https://api.github.com/users/arax/following{/other_user}","gists_url":"https://api.github.com/users/arax/gists{/gist_id}","starred_url":"https://api.github.com/users/arax/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/arax/subscriptions","organizations_url":"https://api.github.com/users/arax/orgs","repos_url":"https://api.github.com/users/arax/repos","events_url":"https://api.github.com/users/arax/events{/privacy}","received_events_url":"https://api.github.com/users/arax/received_events","type":"User","site_admin":false},"milestone":null,"comments":3,"created_at":"2015-11-05T18:29:53Z","updated_at":"2015-11-05T19:15:47Z","closed_at":"2015-11-05T18:46:05Z","body":"Hi everyone,\r\n\r\nI'm trying to use voms authentication and something is not working out.\r\nI have an occi implementation configured with self-signed certificate and I'm using the server certificate as ca-path at rocci-cli call. I think it should work, right?\r\n\r\nI'm doing this call\r\n```\r\nocci --endpoint http://$HOST:8182 --auth x509 --user-cred /tmp/x509up_u1134 --voms --action describe --resource compute --ca-path $PATH -d\r\n```\r\n\r\nConsider that server certificate is inside $PATH folder. The output was:\r\n```\r\n[2015-11-05T12:28:51.722697 #8877] FATAL -- : [rOCCI-cli] An SSL error occurred! Please, make sure your credentials are valid and recognized by the endpoint! Message: SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B: certificate verify failed\r\n/usr/lib/ruby/1.9.1/net/http.rb:799:in `connect': SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B: certificate verify failed (OpenSSL::SSL::SSLError)\r\nfrom /usr/lib/ruby/1.9.1/net/http.rb:799:in `block in connect'\r\nfrom /usr/lib/ruby/1.9.1/timeout.rb:54:in `timeout'\r\nfrom /usr/lib/ruby/1.9.1/timeout.rb:99:in `timeout'\r\nfrom /usr/lib/ruby/1.9.1/net/http.rb:799:in `connect'\r\nfrom /usr/lib/ruby/1.9.1/net/http.rb:755:in `do_start'\r\nfrom /usr/lib/ruby/1.9.1/net/http.rb:744:in `start'\r\nfrom /usr/lib/ruby/1.9.1/net/http.rb:1284:in `request'\r\nfrom /var/lib/gems/1.9.1/gems/httparty-0.13.1/lib/httparty/request.rb:93:in `perform'\r\nfrom /var/lib/gems/1.9.1/gems/httparty-0.13.1/lib/httparty.rb:521:in `perform_request'\r\nfrom /var/lib/gems/1.9.1/gems/httparty-0.13.1/lib/httparty.rb:473:in `post'\r\nfrom /var/lib/gems/1.9.1/gems/occi-api-4.3.2/lib/occi/api/client/http/authn_plugins/keystone.rb:63:in `set_auth_token'\r\nfrom /var/lib/gems/1.9.1/gems/occi-api-4.3.2/lib/occi/api/client/http/authn_plugins/keystone.rb:19:in `setup'\r\nfrom /var/lib/gems/1.9.1/gems/occi-api-4.3.2/lib/occi/api/client/http/helpers.rb:39:in `get_auth'\r\nfrom /var/lib/gems/1.9.1/gems/occi-api-4.3.2/lib/occi/api/client/http/helpers.rb:56:in `rescue in preauthenticate'\r\nfrom /var/lib/gems/1.9.1/gems/occi-api-4.3.2/lib/occi/api/client/http/helpers.rb:46:in `preauthenticate'\r\nfrom /var/lib/gems/1.9.1/gems/occi-api-4.3.2/lib/occi/api/client/client_base.rb:44:in `initialize'\r\nfrom /var/lib/gems/1.9.1/gems/occi-api-4.3.2/lib/occi/api/client/client_http.rb:46:in `initialize'\r\nfrom /var/lib/gems/1.9.1/gems/occi-api-4.3.2/lib/occi/api/dsl.rb:17:in `new'\r\nfrom /var/lib/gems/1.9.1/gems/occi-api-4.3.2/lib/occi/api/dsl.rb:17:in `connect'\r\n```\r\n\r\nAt our occi implementation, the generated token will be the client certificate normalized. Then, we're trying to get the client certificate at server side without success.\r\n\r\nWe also try to use -s option at rocci-cli to not validate the server certificate, in this case, does rocci-cli send the client cert to server? I'm questioning because we can't get it at server side while using -s option.\r\n\r\nWe'd appreciate your help!"},"comment":{"url":"https://api.github.com/repos/EGI-FCTF/rOCCI-cli/issues/comments/154158944","html_url":"https://github.com/EGI-FCTF/rOCCI-cli/issues/17#issuecomment-154158944","issue_url":"https://api.github.com/repos/EGI-FCTF/rOCCI-cli/issues/17","id":154158944,"user":{"login":"spinto","id":3627896,"avatar_url":"https://avatars.githubusercontent.com/u/3627896?v=3","gravatar_id":"","url":"https://api.github.com/users/spinto","html_url":"https://github.com/spinto","followers_url":"https://api.github.com/users/spinto/followers","following_url":"https://api.github.com/users/spinto/following{/other_user}","gists_url":"https://api.github.com/users/spinto/gists{/gist_id}","starred_url":"https://api.github.com/users/spinto/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/spinto/subscriptions","organizations_url":"https://api.github.com/users/spinto/orgs","repos_url":"https://api.github.com/users/spinto/repos","events_url":"https://api.github.com/users/spinto/events{/privacy}","received_events_url":"https://api.github.com/users/spinto/received_events","type":"User","site_admin":false},"created_at":"2015-11-05T19:15:46Z","updated_at":"2015-11-05T19:15:46Z","body":"\nI am out of the office until 11/11/2015.\n\nFor urgent matter, you can contact the TEP Core Team (tepcoreteam@esa.int).\n\n\nNote: This is an automated response to your message  \"[rOCCI-cli] Doubt about\nVOMs authentication (#17)\" sent on 11/5/2015 19:29:54.\n\nThis is the only notification you will receive while this person is away.\n\n\nThis message and any attachments are intended for the use of the addressee or addressees only.\nThe unauthorised disclosure, use, dissemination or copying (either in whole or in part) of its\ncontent is not permitted.\nIf you received this message in error, please notify the sender and delete it from your system.\nEmails can be altered and their integrity cannot be guaranteed by the sender.\n\nPlease consider the environment before printing this email.\n\n"}}