Distribution EOLE

http://hapy.ac-test.fr:29876/

Error response

Error code 405.

Message: Method Not Allowed.

Error code explanation: 405 = Specified method is invalid for this resource.. 

https://hapy.ac-test.fr:29876/

Échec de la connexion sécurisée

root@hapy:~# service opennebula-novnc status
● opennebula-novnc.service - OpenNebula noVNC Server
   Loaded: loaded (/lib/systemd/system/opennebula-novnc.service; disabled; vendor preset: enabled)
   Active: active (running) since Tue 2018-10-09 11:10:06 CEST; 56min ago
  Process: 975 ExecStart=/usr/bin/novnc-server start (code=exited, status=0/SUCCESS)
  Process: 926 ExecStartPre=/usr/sbin/logrotate -f /etc/logrotate.d/opennebula-novnc -s /var/lib/one/.logrotate.status (code=exited, status=0/SUCCESS)
 Main PID: 1019 (python2)
    Tasks: 1 (limit: 4659)
   CGroup: /system.slice/opennebula-novnc.service
           └─1019 python2 /usr/share/one/websockify/websocketproxy.py --target-config=/var/lib/one/sunstone_vnc_tokens --cert /etc/ssl/certs/eole.crt --key /e

oct. 09 11:09:59 hapy systemd[1]: Starting OpenNebula noVNC Server...
oct. 09 11:10:06 hapy novnc-server[975]: VNC proxy started
oct. 09 11:10:06 hapy systemd[1]: Started OpenNebula noVNC Server.
lines 1-13/13 (END)

/etc/one/sunstone-server.conf

:vnc_proxy_port: 29876
:vnc_proxy_support_wss: yes
:vnc_proxy_cert: /etc/ssl/certs/eole.crt
:vnc_proxy_key: /etc/ssl/private/eole.key
:vnc_proxy_ipv6: false
:vnc_request_password: false

root@hapy:/etc/ssl/certs# ll /etc/ssl/certs/eole.crt
-rw-r--r-- 1 root root 1444 oct.   8 19:28 /etc/ssl/certs/eole.crt

root@hapy:/etc/ssl/certs# ll /etc/ssl/private/eole.key
-rw------- 1 root root 1679 oct.   8 19:28 /etc/ssl/private/eole.key
root@hapy:/etc/ssl/certs# 

root@hapy:/etc/ssl/certs# tail -f /var/log/rsyslog/local/novnc-server/novnc-server.info.log 
2018-10-09T11:10:06.379876+02:00 hapy.ac-test.fr novnc-server[975]: VNC proxy started

root@hapy:~# systemctl -p Group show --value opennebula-novnc
oneadmin
root@hapy:~# systemctl -p User show --value opennebula-novnc
oneadmin
root@hapy:~#

Le service est lancé avec eoleone alors que l'utilisation des certificats est autorisé pour root.