Menu ▾ ▴

Cert Issue

vEMan - Support Forum
Bar
2012-12-12
2012-12-13

  • Bar

    Bar - 2012-12-12

    Using the default of SSL_verify_mode of SSL_VERIFY_NONE for client
    is depreciated! Please set SSL_verify_mode to SSL_VERIFY_PEER
    together with SSL_ca_file|SSL_ca_path for verification.
    If you really don't want to verify the certificate and keep the
    connection open to Man-In-The-Middle attacks please set
    SSL_verify_mode explicitly to SSL_VERIFY_NONE in your application.

    at /usr/share/perl5/LWP/Protocol/http.pm line 31.

    Using the default of SSL_verify_mode of SSL_VERIFY_NONE for client
    is depreciated! Please set SSL_verify_mode to SSL_VERIFY_PEER
    together with SSL_ca_file|SSL_ca_path for verification.
    If you really don't want to verify the certificate and keep the
    connection open to Man-In-The-Middle attacks please set
    SSL_verify_mode explicitly to SSL_VERIFY_NONE in your application.

    at /usr/share/perl5/LWP/Protocol/http.pm line 31.

    Using the default of SSL_verify_mode of SSL_VERIFY_NONE for client
    is depreciated! Please set SSL_verify_mode to SSL_VERIFY_PEER
    together with SSL_ca_file|SSL_ca_path for verification.
    If you really don't want to verify the certificate and keep the
    connection open to Man-In-The-Middle attacks please set
    SSL_verify_mode explicitly to SSL_VERIFY_NONE in your application.

    at /usr/share/perl5/LWP/Protocol/http.pm line 31.
    Error: Permission to perform this operation was denied.
    DEBUG: Argument given is valid (F_ERR Target said:\n\n*************
    Using the default of SSL_verify_mode of SSL_VERIFY_NONE for client
    is depreciated! Please set SSL_verify_mode to SSL_VERIFY_PEER
    together with SSL_ca_file|SSL_ca_path for verification.
    If you really don't want to verify the certificate and keep the
    connection open to Man-In-The-Middle attacks please set
    SSL_verify_mode explicitly to SSL_VERIFY_NONE in your application.

    at /usr/share/perl5/LWP/Protocol/http.pm line 31.

    Using the default of SSL_verify_mode of SSL_VERIFY_NONE for client
    is depreciated! Please set SSL_verify_mode to SSL_VERIFY_PEER
    together with SSL_ca_file|SSL_ca_path for verification.
    If you really don't want to verify the certificate and keep the
    connection open to Man-In-The-Middle attacks please set
    SSL_verify_mode explicitly to SSL_VERIFY_NONE in your application.

    at /usr/share/perl5/LWP/Protocol/http.pm line 31.

    Using the default of SSL_verify_mode of SSL_VERIFY_NONE for client
    is depreciated! Please set SSL_verify_mode to SSL_VERIFY_PEER
    together with SSL_ca_file|SSL_ca_path for verification.
    If you really don't want to verify the certificate and keep the
    connection open to Man-In-The-Middle attacks please set
    SSL_verify_mode explicitly to SSL_VERIFY_NONE in your application.

    at /usr/share/perl5/LWP/Protocol/http.pm line 31.
    Error: Permission to perform this operation was denied.\n)

     

  • Bar

    Bar - 2012-12-12

    Ok, this is passable by using:

    export PERL_LWP_SSL_VERIFY_HOSTNAME=0
    export PERL_NET_HTTPS_SSL_SOCKET_CLASS=Net:SSL

     

  • Bar

    Bar - 2012-12-12

    Only now i get this:

    Target said:

    Server version unavailable at 'https://x.x.x.x:443/sdk/vimService.wsdl' at /usr/share/perl/5.14/VMware/VICommon.pm line 545.

    Try to start vEMan v0.9.5_BETA for Linux at the commandline to see debug output

    when brwosing to https://x.x.x.x:443/sdk/vimService.wsdl i do see this XML

    <definitions targetnamespace="urn:vim25Service"><service name="VimService"><port binding="interface:VimBinding" name="VimPort"></port></service></definitions>

    <import location="vim.wsdl" namespace="urn:vim25"><soap:address location="https://localhost/sdk/vimService"></soap:address></import>

     

  • Bar

    Bar - 2012-12-12

    Sorry for multi-posting but i want to make sure you dont need to do extra work for nothing, i saw the other post here about the self-sign certs and i trying installing "libcrypt-ssleay-perl" and tried connecting again, no luck, still stuck at "Server version unavailable at 'https://x.x.x.x:443/sdk/vimService.wsdl' at /usr/share/perl/5.14/VMware/VICommon.pm line 545."

    ovftool -v
    VMware ovftool 3.0.1 (build-801290)

    any other ideas ?

     

  • secure diversITy

    secure diversITy - 2012-12-12

    (moved to support forum)

     

  • secure diversITy

    secure diversITy - 2012-12-12

    Hi and thanks for using vEMan - or trying to do so :-P

    first of all I need some basics:

    1) What is the firmware version of ESX?
    2) ESX or ESXi
    3) Hint: ovftool v3.x is not tested yet - but that will affect appliance deployment etc only so the initial connection should work regardless of this
    4) What is the Version of your VMware SDK Perl Toolkit?

    Thanks in advance
    Thomas

     

  • Bar

    Bar - 2012-12-12

    1) 4.0.0, 171294
    2) ESXi
    4) vSphere SDK for Perl version: 5.0, Script 'vmware-cmd' version: 5.0

     

  • secure diversITy

    secure diversITy - 2012-12-12

    thx.

    Could you please try this:

    PERL_LWP_SSL_VERIFY_HOSTNAME=0 https_proxy="" ./vmapps/general/connect.pl --verbose --server www.xxx.yyy.zzz --username uuuuuuuu
     

  • Bar

    Bar - 2012-12-12

    PERL_LWP_SSL_VERIFY_HOSTNAME=0 https_proxy="" ./vmapps/general/connect.pl --verbose --server x.x.x.x --username xxxx
    Enter password:

    Using the default of SSL_verify_mode of SSL_VERIFY_NONE for client
    is depreciated! Please set SSL_verify_mode to SSL_VERIFY_PEER
    together with SSL_ca_file|SSL_ca_path for verification.
    If you really don't want to verify the certificate and keep the
    connection open to Man-In-The-Middle attacks please set
    SSL_verify_mode explicitly to SSL_VERIFY_NONE in your application.

    at /usr/share/perl5/LWP/Protocol/http.pm line 31.

    REQUEST: $VAR1 = '
    <soapenv:envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
    <soapenv:body>
    <retrieveservicecontent xmlns="urn:vim25"><_this type="ServiceInstance">ServiceInstance</_this>
    </retrieveservicecontent></soapenv:body></soapenv:envelope>
    ';

    Using the default of SSL_verify_mode of SSL_VERIFY_NONE for client
    is depreciated! Please set SSL_verify_mode to SSL_VERIFY_PEER
    together with SSL_ca_file|SSL_ca_path for verification.
    If you really don't want to verify the certificate and keep the
    connection open to Man-In-The-Middle attacks please set
    SSL_verify_mode explicitly to SSL_VERIFY_NONE in your application.

    at /usr/share/perl5/LWP/Protocol/http.pm line 31.

    RESPONSE: $VAR1 = '
    <soapenv:envelope xmlns:soapenc="http://schemas.xmlsoap.org/soap/encoding/" xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
    <soapenv:body>
    <retrieveservicecontentresponse xmlns="urn:vim25"><returnval><rootfolder type="Folder">ha-folder-root</rootfolder><propertycollector type="PropertyCollector">ha-property-collector</propertycollector><viewmanager type="ViewManager">ViewManager</viewmanager><about><name>VMware ESXi</name><fullname>VMware ESXi 4.0.0 build-171294</fullname><vendor>VMware, Inc.</vendor><version>4.0.0</version><build>171294</build><localeversion>INTL</localeversion><localebuild>000</localebuild><ostype>vmnix-x86</ostype><productlineid>embeddedEsx</productlineid><apitype>HostAgent</apitype><apiversion>4.0</apiversion><licenseproductname>VMware ESX Server</licenseproductname><licenseproductversion>4.0</licenseproductversion></about><setting type="OptionManager">HostAgentSettings</setting><userdirectory type="UserDirectory">ha-user-directory</userdirectory><sessionmanager type="SessionManager">ha-sessionmgr</sessionmanager><authorizationmanager type="AuthorizationManager">ha-authmgr</authorizationmanager><perfmanager type="PerformanceManager">ha-perfmgr</perfmanager><eventmanager type="EventManager">ha-eventmgr</eventmanager><taskmanager type="TaskManager">ha-taskmgr</taskmanager><accountmanager type="HostLocalAccountManager">ha-localacctmgr</accountmanager><diagnosticmanager type="DiagnosticManager">ha-diagnosticmgr</diagnosticmanager><licensemanager type="LicenseManager">ha-license-manager</licensemanager><searchindex type="SearchIndex">ha-searchindex</searchindex><filemanager type="FileManager">ha-nfc-file-manager</filemanager><virtualdiskmanager type="VirtualDiskManager">ha-vdiskmanager</virtualdiskmanager><ovfmanager type="OvfManager">ha-ovf-manager</ovfmanager><dvswitchmanager type="DistributedVirtualSwitchManager">ha-dvsmanager</dvswitchmanager></returnval></retrieveservicecontentresponse>
    </soapenv:body>
    </soapenv:envelope>';

    REQUEST: $VAR1 = '
    <soapenv:envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
    <soapenv:body>
    <login xmlns="urn:vim25"><_this type="SessionManager">ha-sessionmgr</_this>
    <username>xxxxxx</username><password>xxxxxxx</password></login></soapenv:body></soapenv:envelope>
    ';

    RESPONSE: $VAR1 = '
    <soapenv:envelope xmlns:soapenc="http://schemas.xmlsoap.org/soap/encoding/" xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
    <soapenv:body>
    <soapenv:fault><faultcode>ServerFaultCode</faultcode><faultstring>Permission to perform this operation was denied.</faultstring><detail><nopermissionfault xmlns="urn:vim25" xsi:type="NoPermission"><object type="Folder">ha-folder-root</object><privilegeid>System.View</privilegeid></nopermissionfault></detail></soapenv:fault>
    </soapenv:body>
    </soapenv:envelope>';

    Error: Permission to perform this operation was denied.

     

  • secure diversITy

    secure diversITy - 2012-12-12

    Thx.

    Hm according to this output:

    ServerFaultCodePermission to perform this operation was denied.ha-folder-rootSystem.View
Error: Permission to perform this operation was denied.

    it could be a permission issue - even when using user "root" like I saw here:

    http://communities.vmware.com/thread/262777

    Do you could try with another user (or/and "root" if not used before) and/or follow the steps mentioned in the above thread?

     

  • Bar

    Bar - 2012-12-12

    Ran as local root + esxi root user, no premission problem but still dosent work

    root@ano-desktop:~/vEMan# PERL_LWP_SSL_VERIFY_HOSTNAME=0 https_proxy="" ./vmapps/general/connect.pl --verbose --server xxxxxxxx --username root
    Enter password:

    Using the default of SSL_verify_mode of SSL_VERIFY_NONE for client
    is depreciated! Please set SSL_verify_mode to SSL_VERIFY_PEER
    together with SSL_ca_file|SSL_ca_path for verification.
    If you really don't want to verify the certificate and keep the
    connection open to Man-In-The-Middle attacks please set
    SSL_verify_mode explicitly to SSL_VERIFY_NONE in your application.

    at /usr/share/perl5/LWP/Protocol/http.pm line 31.

    REQUEST: $VAR1 = '
    <soapenv:envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
    <soapenv:body>
    <retrieveservicecontent xmlns="urn:vim25"><_this type="ServiceInstance">ServiceInstance</_this>
    </retrieveservicecontent></soapenv:body></soapenv:envelope>
    ';

    Using the default of SSL_verify_mode of SSL_VERIFY_NONE for client
    is depreciated! Please set SSL_verify_mode to SSL_VERIFY_PEER
    together with SSL_ca_file|SSL_ca_path for verification.
    If you really don't want to verify the certificate and keep the
    connection open to Man-In-The-Middle attacks please set
    SSL_verify_mode explicitly to SSL_VERIFY_NONE in your application.

    at /usr/share/perl5/LWP/Protocol/http.pm line 31.

    RESPONSE: $VAR1 = '
    <soapenv:envelope xmlns:soapenc="http://schemas.xmlsoap.org/soap/encoding/" xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
    <soapenv:body>
    <retrieveservicecontentresponse xmlns="urn:vim25"><returnval><rootfolder type="Folder">ha-folder-root</rootfolder><propertycollector type="PropertyCollector">ha-property-collector</propertycollector><viewmanager type="ViewManager">ViewManager</viewmanager><about><name>VMware ESXi</name><fullname>VMware ESXi 4.0.0 build-171294</fullname><vendor>VMware, Inc.</vendor><version>4.0.0</version><build>171294</build><localeversion>INTL</localeversion><localebuild>000</localebuild><ostype>vmnix-x86</ostype><productlineid>embeddedEsx</productlineid><apitype>HostAgent</apitype><apiversion>4.0</apiversion><licenseproductname>VMware ESX Server</licenseproductname><licenseproductversion>4.0</licenseproductversion></about><setting type="OptionManager">HostAgentSettings</setting><userdirectory type="UserDirectory">ha-user-directory</userdirectory><sessionmanager type="SessionManager">ha-sessionmgr</sessionmanager><authorizationmanager type="AuthorizationManager">ha-authmgr</authorizationmanager><perfmanager type="PerformanceManager">ha-perfmgr</perfmanager><eventmanager type="EventManager">ha-eventmgr</eventmanager><taskmanager type="TaskManager">ha-taskmgr</taskmanager><accountmanager type="HostLocalAccountManager">ha-localacctmgr</accountmanager><diagnosticmanager type="DiagnosticManager">ha-diagnosticmgr</diagnosticmanager><licensemanager type="LicenseManager">ha-license-manager</licensemanager><searchindex type="SearchIndex">ha-searchindex</searchindex><filemanager type="FileManager">ha-nfc-file-manager</filemanager><virtualdiskmanager type="VirtualDiskManager">ha-vdiskmanager</virtualdiskmanager><ovfmanager type="OvfManager">ha-ovf-manager</ovfmanager><dvswitchmanager type="DistributedVirtualSwitchManager">ha-dvsmanager</dvswitchmanager></returnval></retrieveservicecontentresponse>
    </soapenv:body>
    </soapenv:envelope>';

    REQUEST: $VAR1 = '
    <soapenv:envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
    <soapenv:body>
    <login xmlns="urn:vim25"><_this type="SessionManager">ha-sessionmgr</_this>
    <username>root</username><password>xxxxxxx</password></login></soapenv:body></soapenv:envelope>
    ';

    RESPONSE: $VAR1 = '
    <soapenv:envelope xmlns:soapenc="http://schemas.xmlsoap.org/soap/encoding/" xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
    <soapenv:body>
    <loginresponse xmlns="urn:vim25"><returnval><key>xxxxxxxxxx</key><username>root</username><fullname>Administrator</fullname><logintime>2012-12-13T03:33:18.990169Z</logintime><lastactivetime>2012-12-13T03:33:18.990169Z</lastactivetime><locale>en</locale><messagelocale>en</messagelocale></returnval></loginresponse>
    </soapenv:body>
    </soapenv:envelope>';

    Connection Successful

    REQUEST: $VAR1 = '
    <soapenv:envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
    <soapenv:body>
    <retrieveproperties xmlns="urn:vim25"><_this type="PropertyCollector">ha-property-collector</_this>
    <specset><propset><type>ServiceInstance</type><all>1</all></propset><objectset><obj type="ServiceInstance">ServiceInstance</obj>
    </objectset></specset></retrieveproperties></soapenv:body></soapenv:envelope>
    ';

    RESPONSE: $VAR1 = '
    <soapenv:envelope xmlns:soapenc="http://schemas.xmlsoap.org/soap/encoding/" xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
    <soapenv:body>
    <retrievepropertiesresponse xmlns="urn:vim25"><returnval><obj type="ServiceInstance">ServiceInstance</obj><propset><name>capability</name><val xsi:type="Capability"><provisioningsupported>false</provisioningsupported><multihostsupported>false</multihostsupported><usershellaccesssupported>false</usershellaccesssupported></val></propset><propset><name>content</name><val xsi:type="ServiceContent"><rootfolder type="Folder">ha-folder-root</rootfolder><propertycollector type="PropertyCollector">ha-property-collector</propertycollector><viewmanager type="ViewManager">ViewManager</viewmanager><about><name>VMware ESXi</name><fullname>VMware ESXi 4.0.0 build-171294</fullname><vendor>VMware, Inc.</vendor><version>4.0.0</version><build>171294</build><localeversion>INTL</localeversion><localebuild>000</localebuild><ostype>vmnix-x86</ostype><productlineid>embeddedEsx</productlineid><apitype>HostAgent</apitype><apiversion>4.0</apiversion><licenseproductname>VMware ESX Server</licenseproductname><licenseproductversion>4.0</licenseproductversion></about><setting type="OptionManager">HostAgentSettings</setting><userdirectory type="UserDirectory">ha-user-directory</userdirectory><sessionmanager type="SessionManager">ha-sessionmgr</sessionmanager><authorizationmanager type="AuthorizationManager">ha-authmgr</authorizationmanager><perfmanager type="PerformanceManager">ha-perfmgr</perfmanager><eventmanager type="EventManager">ha-eventmgr</eventmanager><taskmanager type="TaskManager">ha-taskmgr</taskmanager><accountmanager type="HostLocalAccountManager">ha-localacctmgr</accountmanager><diagnosticmanager type="DiagnosticManager">ha-diagnosticmgr</diagnosticmanager><licensemanager type="LicenseManager">ha-license-manager</licensemanager><searchindex type="SearchIndex">ha-searchindex</searchindex><filemanager type="FileManager">ha-nfc-file-manager</filemanager><virtualdiskmanager type="VirtualDiskManager">ha-vdiskmanager</virtualdiskmanager><ovfmanager type="OvfManager">ha-ovf-manager</ovfmanager><dvswitchmanager type="DistributedVirtualSwitchManager">ha-dvsmanager</dvswitchmanager></val></propset><propset><name>serverClock</name><val xsi:type="xsd:dateTime">2012-12-13T03:33:19.099124Z</val></propset></returnval></retrievepropertiesresponse>
    </soapenv:body>
    </soapenv:envelope>';

    REQUEST: $VAR1 = '
    <soapenv:envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
    <soapenv:body>
    <currenttime xmlns="urn:vim25"><_this type="ServiceInstance">ServiceInstance</_this>
    </currenttime></soapenv:body></soapenv:envelope>
    ';

    RESPONSE: $VAR1 = '
    <soapenv:envelope xmlns:soapenc="http://schemas.xmlsoap.org/soap/encoding/" xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
    <soapenv:body>
    <currenttimeresponse xmlns="urn:vim25"><returnval>2012-12-13T03:33:19.212631Z</returnval></currenttimeresponse>
    </soapenv:body>
    </soapenv:envelope>';

    Server Time : 2012-12-13T03:33:19.212631Z

    REQUEST: $VAR1 = '
    <soapenv:envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
    <soapenv:body>
    <logout xmlns="urn:vim25"><_this type="SessionManager">ha-sessionmgr</_this>
    </logout></soapenv:body></soapenv:envelope>
    ';

    RESPONSE: $VAR1 = '
    <soapenv:envelope xmlns:soapenc="http://schemas.xmlsoap.org/soap/encoding/" xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
    <soapenv:body>
    <logoutresponse xmlns="urn:vim25"></logoutresponse>
    </soapenv:body>
    </soapenv:envelope>';

    root@ano-desktop:~/vEMan#

     

  • secure diversITy

    secure diversITy - 2012-12-12

    hm ok so it seems to be a permission issue on ESX site because the above command I told you was only to test the connection itself. And that is working as user "root" as you can see here:

    RESPONSE: $VAR1 = '<?xml version="1.0" encoding="UTF-8"?>
xxxxxxxxxxrootAdministrator2012-12-13T03:33:18.990169Z2012-12-13T03:33:18.990169Zenen

Connection Successful

    Have you tried to start vEMan and enter the username "root" in the login dialog?

     

  • Bar

    Bar - 2012-12-12

    ok, so it's working apperently XD, sorry for not checking after user change.

    BTW, just wanted to tell you I really like your program, its very handy :)
    Good Job man !

     

  • secure diversITy

    secure diversITy - 2012-12-13

    Oh no problem!
    I'm always happy when a problem can be solved and another vEMan user is born :o)

    Thanks for your words - those are the reason why I keep up my work on vEMan ..

    You can take a look here if you want to support me:

    https://sourceforge.net/p/veman/discussion/support/thread/abf1b5d9/

     

Log in to post a comment.

Want the latest updates on software, tech news, and AI?
Get latest updates about software, tech news, and AI from SourceForge directly in your inbox once a month.