Skip to content

Instantly share code, notes, and snippets.

Show Gist options
  • Save smurugap/e8e89199f2d7479338c0 to your computer and use it in GitHub Desktop.
Save smurugap/e8e89199f2d7479338c0 to your computer and use it in GitHub Desktop.
changes reqd for ovsdb over ssl with contrail
To generate certs:
apt-get install openvswitch-common
ovs-pki init
ovs-pki req+sign vtep
scp vtep-cert.pem root@<tor>:/var/db/certs
scp vtep-privkey.pem root@<tor>:/var/db/certs
QFX Config:
set protocols ovsdb controller <ha proxy vip> protocol ssl port <port>
(remove the passive option)
testbed.py:
env.ca_cert_file= '/var/lib/openvswitch/pki/switchca/cacert.pem'
under tor-agent set the protocol to pssl:
'tor_ovs_protocol':'pssl',
the ssl port is where the agent listens so it has to be uniq unless the agents are spawned on different tsns
@cijohnson
Copy link

@smurugap Is this correct one? not working!!! Venu/Vinoth are stuck

@smurugap
Copy link
Author

@cijohnson Its been 7 years, I will be surprised if it still works. :-)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment