我有一台 vCenter 6.5 服务器和一个名为 的内容库iso
。我想从https://mirror.us-midwest-1.nexcess.net/CentOS/7.4.1708/isos/x86_64/CentOS-7-x86_64-Everything-1708.iso。但是这样做时,导入会失败并出现以下错误:
A general system error occurred: The import of library item ff47df87-2352-4714-a321-7d2cdc699999 has failed. Reason: InternalServerError (com.vmware.vapi.std.errors.internal_server_error) => { messages = [LocalizableMessage (com.vmware.vapi.std.localizable_message) => { id = com.vmware.vdcs.cls-main.error_while_transferring_from, defaultMessage = Error transferring file CentOS-7-x86_64-Everything-1708.iso from https://mirror.us-midwest-1.nexcess.net/CentOS/7.4.1708/isos/x86_64/CentOS-7-x86_64-Everything-1708.iso. Reason: Server not trusted: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target, args = [CentOS-7-x86_64-Everything-1708.iso, https://mirror.us-midwest-1.nexcess.net/CentOS/7.4.1708/isos/x86_64/CentOS-7-x86_64-Everything-1708.iso, Server not trusted: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target] }], data = <null> }.
服务器https://mirror.us-midwest-1.nexcess.net/具有 Commodo 证书。其他下载站点使用 Let's Encrypt 证书。
如何将这些证书颁发机构的根证书和中间证书添加到 vCenter,以便我可以从互联网下载 ISO 映像?
我一直在查看文档但找不到任何文档。
答案1
我还没有尝试过,但也许你可以通过以下方式添加根 CAvecs-cli 条目创建到 TRUSTED_ROOTS。