We are receiving ConverterSSLVerificationFault when we try to re-configure a VM on a ESX host. We always use verifyPeer==false to get rid of SSL related errors and that worked fine for us with Converter 4.3.
Is it possible to disable such verification for Converter 5.1?
Request:
<?xml version='1.0' encoding='UTF-8'?><S:Envelope xmlns:S="http://schemas.xmlsoap.org/soap/envelope/"> <S:Body> <ns2:ConverterServerConversionManagerCreateJob xmlns="urn:vim25" xmlns:ns2="urn:converter"> <ns2:_this type="ConverterServerConversionConversionManager">ConversionManager</ns2:_this> <ns2:spec> <ns2:name>foo</ns2:name> <ns2:source> <ns2:location xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="ns2:ConverterComputerSpecManagedVmLocation"> <ns2:vimConnect> <ns2:hostname>172.28.17.239</ns2:hostname> <ns2:credentials xsi:type="ns2:ConverterVimConnectionSpecLoginVimCredentials"> </ns2:credentials> <ns2:verifyPeer>false</ns2:verifyPeer> </ns2:vimConnect> <ns2:uuid>ef5f86c0-ad10-41a3-aa20-2c81cedbb242</ns2:uuid> </ns2:location> </ns2:source> <ns2:conversionParams> <ns2:doReconfig>true</ns2:doReconfig> <ns2:reconfigParams/> <ns2:doInstallTools>true</ns2:doInstallTools> <ns2:doCustomize>false</ns2:doCustomize> <ns2:removeRestoreCheckpoints>true</ns2:removeRestoreCheckpoints> </ns2:conversionParams> </ns2:spec> </ns2:ConverterServerConversionManagerCreateJob> </S:Body></S:Envelope>
Response:
<?xml version="1.0" encoding="UTF-8"?><soapenv:Envelope xmlns:soapenc="http://schemas.xmlsoap.org/soap/encoding/" xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"> <soapenv:Body> <soapenv:Fault> <faultcode>ServerFaultCode</faultcode> <faultstring>A specified parameter was not correct. </faultstring> <detail> <InvalidArgumentFault xmlns="urn:converter" xsi:type="vim25:InvalidArgument" xmlns:vim25="urn:vim25"> <vim25:faultCause> <vim25:fault xsi:type="ConverterSSLVerificationFault"> <selfSigned>false</selfSigned> <thumbprint>84:93:B6:B7:EF:D5:30:36:46:D3:70:DD:2A:DC:9C:B9:18:B3:EF:B5 </thumbprint> <msg>Verification parameters: PeerThumbprint: 84:93:B6:B7:EF:D5:30:36:46:D3:70:DD:2A:DC:9C:B9:18:B3:EF:B5 ExpectedThumbprint: ExpectedPeerName: 172.28.17.239 The remote host certificate has these problems: * The host certificate chain is incomplete. * Host name does not match the subject name(s) in certificate. * unable to get local issuer certificate </msg> </vim25:fault> <vim25:localizedMessage>Unable to verify the authenticity of the SSL certificate. Peer thumbprint: 84:93:B6:B7:EF:D5:30:36:46:D3:70:DD:2A:DC:9C:B9:18:B3:EF:B5. </vim25:localizedMessage> </vim25:faultCause> </InvalidArgumentFault> </detail> </soapenv:Fault> </soapenv:Body></soapenv:Envelope>