# cd /etc/pki/tls/certs
[[email protected] certs]# make vnc.key
Enter pass phrase:# 輸入密碼
Verifying - Enter pass phrase:#確認

# openssl rsa -in vnc.key -out vnc.key
# make vnc.csr
Country Name (2 letter code) [XX]:CN# 國家
State or Province Name (full name) []:shanghai   # 省
Locality Name (eg, city) [Default City]: shanghai   # 市
Organization Name (eg, company) [Default Company Ltd]:openstack  # 公司
Organizational Unit Name (eg, section) []:Server World   # 部門
Common Name (eg, your name or your server‘s hostname) []:www.srv.world   # 主機名
Email Address []:[email protected]

# openssl x509 -in vnc.csr -out vnc.crt -req -signkey vnc.key -days 3650
Signature ok
subject=/C=CN/ST=shanghai/L=shanghai/O=openstack/OU=computer/CN=w[email protected]

2、拷貝證書：

# cp -a vnc.key /etc/pki/tls/private

3、賦予權限：

# chown nova:nova  /etc/pki/tls/private/vnc.key
# chown nova:nova  /etc/pki/tls/certs/vnc.crt

4、在controller上配置nova.conf

[DEFAULT]
ssl_only=True
cert=/etc/pki/tls/certs/vnc.crt
key=/etc/pki/tls/private/vnc.key
[vnc]
novncproxy_base_url = https://192.168.8.100:6080/vnc_auto.html

5、在computer上配置nova.conf

[vnc]
novncproxy_base_url = https://192.168.8.100:6080/vnc_auto.html

6、controller重啟nova服務

# systemctl | grep nova | awk -F " " ‘{print$1}‘ | xargs systemctl restart

7、Computer上重啟服務

# systemctl | grep nova | awk -F " " ‘{print$1}‘ | xargs systemctl restart

8、驗證：

本文出自 “雲計算” 博客，請務必保留此出處http://chengshimayi.blog.51cto.com/9327987/1922196

openstack的vnc啟動ssl