如何信任 VMware vCenter 6.5 中的第三方憑證?

如何信任 VMware vCenter 6.5 中的第三方憑證?

我有一個 vCenter 6.5 伺服器和一個名為 的內容庫iso。我想從以下位置導入 CentOS 7.4https://mirror.us-midwest-1.nexcess.net/CentOS/7.4.1708/isos/x86_64/CentOS-7-x86_64-Everything-1708.iso。但這樣做時,導入失敗並出現以下錯誤:

A general system error occurred: The import of library item ff47df87-2352-4714-a321-7d2cdc699999 has failed. Reason: InternalServerError (com.vmware.vapi.std.errors.internal_server_error) => { messages = [LocalizableMessage (com.vmware.vapi.std.localizable_message) => { id = com.vmware.vdcs.cls-main.error_while_transferring_from, defaultMessage = Error transferring file CentOS-7-x86_64-Everything-1708.iso from https://mirror.us-midwest-1.nexcess.net/CentOS/7.4.1708/isos/x86_64/CentOS-7-x86_64-Everything-1708.iso. Reason: Server not trusted: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target, args = [CentOS-7-x86_64-Everything-1708.iso, https://mirror.us-midwest-1.nexcess.net/CentOS/7.4.1708/isos/x86_64/CentOS-7-x86_64-Everything-1708.iso, Server not trusted: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target] }], data = <null> }.

伺服器https://mirror.us-midwest-1.nexcess.net/擁有 Commodo 證書。其他下載網站使用 Let's Encrypt 憑證。

如何將這些憑證授權單位的根憑證和中間憑證新增至 vCenter,以便我可以從 Internet 下載 ISO 映像?

我一直在查看文檔,但找不到任何文檔。

答案1

我還沒有嘗試過這個,但也許你可以通過添加根 CAvecs-cli 條目創建至 TRUSTED_ROOTS。

相關內容