{"action":"created","issue":{"url":"https://api.github.com/repos/vmware/vic/issues/2571","repository_url":"https://api.github.com/repos/vmware/vic","labels_url":"https://api.github.com/repos/vmware/vic/issues/2571/labels{/name}","comments_url":"https://api.github.com/repos/vmware/vic/issues/2571/comments","events_url":"https://api.github.com/repos/vmware/vic/issues/2571/events","html_url":"https://github.com/vmware/vic/issues/2571","id":181116560,"number":2571,"title":"TLS not working as expected (?) ","user":{"login":"mreferre","id":4123965,"avatar_url":"https://avatars.githubusercontent.com/u/4123965?v=3","gravatar_id":"","url":"https://api.github.com/users/mreferre","html_url":"https://github.com/mreferre","followers_url":"https://api.github.com/users/mreferre/followers","following_url":"https://api.github.com/users/mreferre/following{/other_user}","gists_url":"https://api.github.com/users/mreferre/gists{/gist_id}","starred_url":"https://api.github.com/users/mreferre/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mreferre/subscriptions","organizations_url":"https://api.github.com/users/mreferre/orgs","repos_url":"https://api.github.com/users/mreferre/repos","events_url":"https://api.github.com/users/mreferre/events{/privacy}","received_events_url":"https://api.github.com/users/mreferre/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/vmware/vic/labels/area/appliance","name":"area/appliance","color":"fef2c0"},{"url":"https://api.github.com/repos/vmware/vic/labels/kind/bug","name":"kind/bug","color":"f7c6c7"},{"url":"https://api.github.com/repos/vmware/vic/labels/kind/bug/p0","name":"kind/bug/p0","color":"d93f0b"}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":{"url":"https://api.github.com/repos/vmware/vic/milestones/37","html_url":"https://github.com/vmware/vic/milestones/VIC%20GA%20Release","labels_url":"https://api.github.com/repos/vmware/vic/milestones/37/labels","id":1799354,"number":37,"title":"VIC GA Release","description":"Milestone for tracking all work towards the GA goal","creator":{"login":"mdubya66","id":15821624,"avatar_url":"https://avatars.githubusercontent.com/u/15821624?v=3","gravatar_id":"","url":"https://api.github.com/users/mdubya66","html_url":"https://github.com/mdubya66","followers_url":"https://api.github.com/users/mdubya66/followers","following_url":"https://api.github.com/users/mdubya66/following{/other_user}","gists_url":"https://api.github.com/users/mdubya66/gists{/gist_id}","starred_url":"https://api.github.com/users/mdubya66/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mdubya66/subscriptions","organizations_url":"https://api.github.com/users/mdubya66/orgs","repos_url":"https://api.github.com/users/mdubya66/repos","events_url":"https://api.github.com/users/mdubya66/events{/privacy}","received_events_url":"https://api.github.com/users/mdubya66/received_events","type":"User","site_admin":false},"open_issues":136,"closed_issues":343,"state":"open","created_at":"2016-05-31T17:50:00Z","updated_at":"2016-10-05T14:59:16Z","due_on":"2016-11-07T00:00:00Z","closed_at":null},"comments":4,"created_at":"2016-10-05T10:24:52Z","updated_at":"2016-10-05T15:03:53Z","closed_at":null,"body":"@mlh78750 @corrieb \r\n\r\nI have been talking to @stuclem about this but we couldn’t figure out what’s going on. \r\n\r\nIn a nutshell, our understanding is that if you deploy a VCH by default it is TLS enabled and you need to use the certificates generated to be able to connect to it. \r\n\r\nThis is the string I am using to deploy mine: \r\n\r\n       ./vic/vic-machine-darwin create --name VCH1 \\\r\n            --target \"${VCENTERSERVER}\" \\\r\n            --user \"${VSPHEREUSER}\" \\\r\n            --password \"${VSPHEREPASSWORD}\" \\\r\n            --bridge-network \"${VCHINTERNALNETWORK}\" \\\r\n            --external-network \"${EXTERNALNETWORK}\" \\\r\n            --image-store \"${VSPHEREDATASTORE}\"  \\\r\n            --docker-insecure-registry \"${HARBORVMIP}”\r\n\r\nThe weird thing about this is that I can connect to this deamon from literally everywhere I want (different laptops etc) and still get access to it. My VCH has IP `192.168.1.195` and here is what I can do from a laptop that I have never used before (where I have just installed Docker and never downloaded vic-machine ever):\r\n```\r\nmreferre-m01:~ mreferre$ export DOCKER_HOST=192.168.1.195:2376\r\n\r\nmreferre-m01:~ mreferre$ docker ps\r\nGet http://192.168.1.195:2376/v1.24/containers/json: malformed HTTP response \"\\x15\\x03\\x01\\x00\\x02\\x02\".\r\n* Are you trying to connect to a TLS-enabled daemon without TLS?\r\n\r\nmreferre-m01:~ mreferre$ docker --tls ps\r\nError response from daemon: client is newer than server (client API version: 1.24, server API version: 1.23)\r\n\r\nmreferre-m01:~ mreferre$ export DOCKER_API_VERSION=1.23\r\n\r\nmreferre-m01:~ mreferre$ docker --tls ps\r\nCONTAINER ID        IMAGE               COMMAND             CREATED             STATUS              PORTS               NAMES\r\n\r\nmreferre-m01:~ mreferre$ docker --tls images\r\nREPOSITORY          TAG                 IMAGE ID            CREATED             SIZE\r\n\r\nmreferre-m01:~ mreferre$ docker --tls pull alpine\r\nUsing default tag: latest\r\nPulling from library/alpine\r\nc0cb142e4345: Pull complete \r\nDigest: sha256:d019def466a5d56146bc49f16eeab517d3e007b60a1811bcf899b624cfb98cd6\r\nStatus: Downloaded newer image for library/alpine:latest\r\n\r\nmreferre-m01:~ mreferre$ docker --tls run -it alpine /bin/ash\r\n/ # \r\n```\r\n\r\nI have never copied the certificates generated by vic-machine on this laptop. The first docker thing that this laptop has ever done is what you see above. And yet it was able to instantiate a ContainerVM on the VCH. \r\n\r\nWe thought this was the behaviour if you use the `--no-tls` flag in vic-machine at VCH deployment time (that would allow you to connect un-authenticated to the VCH on port `2375`). Right now it seems I am able to connect un-authenticated to the VCH on port `2376`. \r\n\r\nThoughts? "},"comment":{"url":"https://api.github.com/repos/vmware/vic/issues/comments/251701712","html_url":"https://github.com/vmware/vic/issues/2571#issuecomment-251701712","issue_url":"https://api.github.com/repos/vmware/vic/issues/2571","id":251701712,"user":{"login":"mdubya66","id":15821624,"avatar_url":"https://avatars.githubusercontent.com/u/15821624?v=3","gravatar_id":"","url":"https://api.github.com/users/mdubya66","html_url":"https://github.com/mdubya66","followers_url":"https://api.github.com/users/mdubya66/followers","following_url":"https://api.github.com/users/mdubya66/following{/other_user}","gists_url":"https://api.github.com/users/mdubya66/gists{/gist_id}","starred_url":"https://api.github.com/users/mdubya66/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mdubya66/subscriptions","organizations_url":"https://api.github.com/users/mdubya66/orgs","repos_url":"https://api.github.com/users/mdubya66/repos","events_url":"https://api.github.com/users/mdubya66/events{/privacy}","received_events_url":"https://api.github.com/users/mdubya66/received_events","type":"User","site_admin":false},"created_at":"2016-10-05T15:03:53Z","updated_at":"2016-10-05T15:03:53Z","body":"@hickeng is this the culprit? https://github.com/vmware/vic/blob/master/lib/install/management/appliance.go#L651"}}
{"actor":{"display_login":"mdubya66"}}