Hi, I installed KVM on a CentOS 7.4 host. The guest is also installed in CentOS 7.4, the network works perfectly.
Both Host and Guest machines have the same OS.
I do not understand why I have an SSL error on the guest and not on the host while the two computers have the same OS installation.
The firewalld, selinux, fail2ban services are not installed on host and guest.
Is there an extra manipulation that I have forgotten to do? Many thanks. Below my log on Host and Guest.
Host /usr/bin/wget --version GNU Wget 1.14 built on linux-gnu.
wget https://www.google.com --2017-09-19 16:15:44-- https://www.google.com/ Resolving www.google.comhttp://www.google.com (www.google.comhttp://www.google.com)... 2a00:1450:4009:809::2004, 216.58.198.164 Connecting to www.google.comhttp://www.google.com (www.google.comhttp://www.google.com)|2a00:1450:4009:809::2004|:443... connected. HTTP request sent, awaiting response... 302 Found Location: https://www.google.fr/?gfe_rd=cr&dcr=0&ei=kCbBWe-fOMnU8gfBmLmABA [following] --2017-09-19 16:15:44-- https://www.google.fr/?gfe_rd=cr&dcr=0&ei=kCbBWe-fOMnU8gfBmLmABA Resolving www.google.frhttp://www.google.fr (www.google.frhttp://www.google.fr)... 2a00:1450:4009:814::2003, 216.58.204.3 Connecting to www.google.frhttp://www.google.fr (www.google.frhttp://www.google.fr)|2a00:1450:4009:814::2003|:443... connected. HTTP request sent, awaiting response... 200 OK Length: unspecified [text/html] Saving to: 'index.html.10' [ <=> ] 10,853 --.-K/s in 0s 2017-09-19 16:15:45 (41.9 MB/s) - 'index.html.10' saved [10853]
Guest VM ping www.google.comhttp://www.google.com return OK
/usr/bin/wget --version GNU Wget 1.14 built on linux-gnu.
My Pb on the guest :
wget https://www.google.com --2017-09-19 16:16:03-- https://www.google.com/ Resolving www.google.comhttp://www.google.com (www.google.comhttp://www.google.com)... 216.58.198.164, 2a00:1450:4009:809::2004 Connecting to www.google.comhttp://www.google.com (www.google.comhttp://www.google.com)|216.58.198.164|:443... connected. OpenSSL: error:1408D07B:SSL routines:ssl3_get_key_exchange:bad signature Unable to establish SSL connection.
__________________________ Avant d'imprimer, pensez à l'environnement ! Please consider the environment before printing ! Ce message et toutes ses pièces jointes sont confidentiels et établis à l'intention exclusive de ses destinataires. Toute utilisation non conforme à sa destination, toute diffusion ou toute publication, totale ou partielle, est interdite, sauf autorisation expresse. IFP Energies nouvelles décline toute responsabilité au titre de ce message. This message and any attachments are confidential and intended solely for the addressees. Any unauthorised use or dissemination is prohibited. IFP Energies nouvelles should not be liable for this message. __________________________
Do you have ca-certificates installed in the VM
-- Sent from the Delta quadrant using Borg technology!
Nux! www.nux.ro
----- Original Message -----
From: "MOKRANI Rachid" rachid.mokrani@ifpen.fr To: "CentOS mailing list" centos@centos.org Sent: Tuesday, 19 September, 2017 15:34:37 Subject: [CentOS] KVM SSL with wget
Hi, I installed KVM on a CentOS 7.4 host. The guest is also installed in CentOS 7.4, the network works perfectly.
Both Host and Guest machines have the same OS.
I do not understand why I have an SSL error on the guest and not on the host while the two computers have the same OS installation.
The firewalld, selinux, fail2ban services are not installed on host and guest.
Is there an extra manipulation that I have forgotten to do? Many thanks. Below my log on Host and Guest.
Host /usr/bin/wget --version GNU Wget 1.14 built on linux-gnu.
wget https://www.google.com --2017-09-19 16:15:44-- https://www.google.com/ Resolving www.google.comhttp://www.google.com (www.google.comhttp://www.google.com)... 2a00:1450:4009:809::2004, 216.58.198.164 Connecting to www.google.comhttp://www.google.com (www.google.comhttp://www.google.com)|2a00:1450:4009:809::2004|:443... connected. HTTP request sent, awaiting response... 302 Found Location: https://www.google.fr/?gfe_rd=cr&dcr=0&ei=kCbBWe-fOMnU8gfBmLmABA [following] --2017-09-19 16:15:44-- https://www.google.fr/?gfe_rd=cr&dcr=0&ei=kCbBWe-fOMnU8gfBmLmABA Resolving www.google.frhttp://www.google.fr (www.google.frhttp://www.google.fr)... 2a00:1450:4009:814::2003, 216.58.204.3 Connecting to www.google.frhttp://www.google.fr (www.google.frhttp://www.google.fr)|2a00:1450:4009:814::2003|:443... connected. HTTP request sent, awaiting response... 200 OK Length: unspecified [text/html] Saving to: 'index.html.10' [ <=> ] 10,853 --.-K/s in 0s 2017-09-19 16:15:45 (41.9 MB/s) - 'index.html.10' saved [10853]
Guest VM ping www.google.comhttp://www.google.com return OK
/usr/bin/wget --version GNU Wget 1.14 built on linux-gnu.
My Pb on the guest :
wget https://www.google.com --2017-09-19 16:16:03-- https://www.google.com/ Resolving www.google.comhttp://www.google.com (www.google.comhttp://www.google.com)... 216.58.198.164, 2a00:1450:4009:809::2004 Connecting to www.google.comhttp://www.google.com (www.google.comhttp://www.google.com)|216.58.198.164|:443... connected. OpenSSL: error:1408D07B:SSL routines:ssl3_get_key_exchange:bad signature Unable to establish SSL connection.
Avant d'imprimer, pensez à l'environnement ! Please consider the environment before printing ! Ce message et toutes ses pièces jointes sont confidentiels et établis à l'intention exclusive de ses destinataires. Toute utilisation non conforme à sa destination, toute diffusion ou toute publication, totale ou partielle, est interdite, sauf autorisation expresse. IFP Energies nouvelles décline toute responsabilité au titre de ce message. This message and any attachments are confidential and intended solely for the addressees. Any unauthorised use or dissemination is prohibited. IFP Energies nouvelles should not be liable for this message. __________________________ _______________________________________________ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos