On Thu, Sep 19, 2013 at 9:16 PM, Prashant Chougule <chougulepa...@gmail.com> wrote: > hi, > I try with ovs-vswitchd also but same error as i mention from controller > side, > ./ovs-vswitchd > --certificate=/home/prashant/ovs1.9/openvswitch-1.9.0/ovs/bin/ctl-cert.pem > --private-key=/home/prashant/ovs1.9/openvswitch-1.9.0/ovs/bin/ctl-privkey.pem > --peer-ca-cert=/home/prashant/ovs1.9/openvswitch-1.9.0/ovs/var/lib/openvswitch/pki/controllerca/cacert.pem > --overwrite-pidfile --detach
Look at ovs-vswitchd.log and should tell you the reason for failed SSL connectivity. You can also look at the controller table with 'ovs-vsctl list controller' and it should tell something in the status:last_error column. > and then > ./ovs-vsctl set-controller br0 ssl:127.0.0.1:6634 > still the same.is anything do i need to change in my configuration? > > > > On Thu, Sep 19, 2013 at 8:00 PM, Gurucharan Shetty <shet...@nicira.com> > wrote: >> >> On Thu, Sep 19, 2013 at 5:09 AM, Prashant Chougule >> <chougulepa...@gmail.com> wrote: >> > hello, >> > >> > I am trying to connect ovs with floodlight controller over ssl >> > but >> > i am not able to connect, >> > i have created keys for the controller and for switch using ovs-pki and >> > try >> > to connect using ovs-vsctl >> > ./ovs-vsctl --certificate=ctl-cert.pem --private-key=ctl-privkey.pem >> > --peer-ca-cert=../var/lib/openvswitch/pki/controllerca/cacert.pem >> > set-controller br0 ssl:127.0.0.1:6634 >> >> Keep in mind a couple of things. >> 1) ovs-vswitchd should know the location of private key and certs. You >> should either pass those location through command line to ovs-vswitchd >> during startup or through the SSL table. (I see it as odd that you are >> using it with ovs-vsctl) >> 2) "../var/lib/openvswitch/pki/controllerca/cacert.pem" hopefully is >> something the controller is actually using as its cert. >> >> > but not able to connect to controller controller gives me >> > 17:39:49.181 [New I/O server worker #1-2] INFO >> > n.f.core.internal.Controller >> > - New switch connection from /127.0.0.1:40014 >> > 17:39:49.182 [New I/O server worker #1-2] INFO >> > n.f.core.internal.Controller >> > - Disconnected switch OFSwitchImpl [/127.0.0.1:40014 DPID[?]] >> > such messages. >> > am doing any wrong setp or anybody tell me how to set ssl between ovs >> > and >> > controller? >> > >> > -- >> > Thanks &Regards, >> > Prashant Chougule. >> > >> > _______________________________________________ >> > discuss mailing list >> > discuss@openvswitch.org >> > http://openvswitch.org/mailman/listinfo/discuss >> > > > > > > -- > Thanks &Regards, > Prashant Chougule. _______________________________________________ discuss mailing list discuss@openvswitch.org http://openvswitch.org/mailman/listinfo/discuss
