sdn certs module

  • Hi
    I was trying to make the sdn work(I think it works nicely), I know you can just provide the certs but I'm a perfectionist. 😞 I'm still learning my way in programming, total beginner, anyway but how do you install node-openssl-cert module library in yarn so I'd be able to create certs from scratch from the web gui? Thanks!

  • XCP-ng Team

    We can't provide certificates, because they aren't universal. A valid certificate is linked to a cert authority and signed for your own domain/infrastructure.

    However, if I remember correctly, you can autogenerate them. @BenjiReis will confirm this

  • XCP-ng Team


    There's 2 ways to use the SDN controller as for the certificates:

    • You can provide the vertificate yourself, if you arleardy have certificates, in this case you need to provide a path to the certificate directory in the plugin configuration and make sure that there is client-cert.pem, client-key.pem and ca-cert.pem in the directory
    • If you don't have certificates, the SDN controller can create them, but they will be self signed. To do so you just leave the certificate configuration path empty.

    Is that clear?


  • Well the autogenerator dosn't work when you build from source. Apparently it lacks the said module. So how do I install the node-openssl-cert module so it works in yarn?

  • XCP-ng Team

    That's strange, did you follow the official guide to build xen-orchestra from sources?
    All dependencies should be installed.

  • XCP-ng Team

    I've just tried locally from sources and everything went fine.

    Can you try to call yarn and then yarn build at the root of xen-orchestra repository?


  • Ok, I'll try later today, thanks for the answers!

  • Ok, I tried again, same thing. So I run sudo yarn start in xo-server directory. And I watch the logs while I try to use the certs autogenerator. This is what I get:

    2019-07-29T18:20:46.778Z - xo:xo-server:sdn-controller - [DEBUG] No cert-dir provided, using default self-signed certificates
    2019-07-29T18:20:46.780Z - xo:xo-server:sdn-controller - [DEBUG] No default self-signed certificates exists, creating them
    2019-07-29T18:20:47.611Z - xo:xo-server:sdn-controller - [ERROR] Error while generating CA private key
    { error: false }

    As I said it's not a problem per se, I'm just trying to figure out out of curiosity why it doesn't work.

  • XCP-ng Team

    It could be something linked to your environment because it works on our side 😕

    But why? Hard to tell. That's exactly the main reason why we do pro support only on a controlled environment (XOA, Xen Orchestra virtual Appliance), because otherwise you could have tons of external factors that make it fails.

    Double check you are on latest master commit, ideally clone it from scratch and rebuild everything. Check your Node and npm version.

  • XCP-ng Team


    I've managed to reproduce you're error. It's not a build issue.
    A fix is coming right away, I'll post it here once it's merged into master so you can get it. 🙂

    Thanks for the report.

  • XCP-ng Team

    @BenjiReis do you know the problematic commit in question?

  • XCP-ng Team

    Yes it's 5396b90695fbe2c7a5f56d72a94a208517b2d517 but its not its only modification so it can't just be reverted.
    This is a really quick fix I can push a branch today and it can be used waiting for the merge.

  • XCP-ng Team


    The fix is available on master. 🙂
    You should be able to generate certificate now.

  • XCP-ng Team

    Well done 🙂

  • Great! Your team proves just how legendary it is once again! Thank you!

Log in to reply

XCP-ng Pro Support

XCP-ng Pro Support