<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div style="" class="markdown-here-wrapper" data-md-url="null">
<p style="margin: 1.2em 0px ! important;">On 05/27/2016 04:56 AM,
Pang Long wrote:</p>
<p style="margin: 1.2em 0px ! important;"></p>
<div class="markdown-here-exclude">
<p></p>
<blockquote
cite="mid:CADkZkvcr6y_yvz_vXp95pnhpXJymqYdDWGV2qWPQBAGch-4yNA@mail.gmail.com"
type="cite">
<div dir="ltr">
<div>
<div> Thanks a lot for your reply. I'm sorry to reply
to you so lately.<br>
<div> Your suggestion help me fix that problem. The
IP address was wrong in /etc/hosts. <br>
But there is a new problem.<br>
on VM2, the following error is reported in
/var/www/arvados-api/shared/log/production.log:<br>
Faraday::Error::ConnectionFailed (SSL_connect
returned=1 errno=0 state=unknown state: certificate
verify failed):<br>
app/middlewares/arvados_api_token.rb:59:in `call'<br>
</div>
<div> <br>
</div>
<div> Is it due to my self-signed certificate?<br>
</div>
</div>
</div>
</div>
</blockquote>
<p></p>
</div>
<p style="margin: 1.2em 0px ! important;"></p>
<p style="margin: 1.2em 0px ! important;">Long,</p>
<p style="margin: 1.2em 0px ! important;">That’s the most likely
explanation, yes. You can configure the API server to accept the
self-signed certificate by setting <code style="font-size: 0.85em; font-family: Consolas,Inconsolata,Courier,monospace;margin: 0px 0.15em; padding: 0px 0.3em; white-space: pre-wrap; border: 1px solid rgb(234, 234, 234); background-color: rgb(248, 248, 248); border-radius: 3px; display: inline;">sso_insecure: true</code>
in the appropriate section of your API server’s <code style="font-size: 0.85em; font-family: Consolas,Inconsolata,Courier,monospace;margin: 0px 0.15em; padding: 0px 0.3em; white-space: pre-wrap; border: 1px solid rgb(234, 234, 234); background-color: rgb(248, 248, 248); border-radius: 3px; display: inline;">application.yml</code>.</p>
<p style="margin: 1.2em 0px ! important;">When you set up
Workbench, if your API server also has a self-signed
certificate, you’ll similarly need to set <code style="font-size: 0.85em; font-family: Consolas,Inconsolata,Courier,monospace;margin: 0px 0.15em; padding: 0px 0.3em; white-space: pre-wrap; border: 1px solid rgb(234, 234, 234); background-color: rgb(248, 248, 248); border-radius: 3px; display: inline;">arvados_insecure_https: true</code>
in Workbench’s <code style="font-size: 0.85em; font-family: Consolas,Inconsolata,Courier,monospace;margin: 0px 0.15em; padding: 0px 0.3em; white-space: pre-wrap; border: 1px solid rgb(234, 234, 234); background-color: rgb(248, 248, 248); border-radius: 3px; display: inline;">application.yml</code>.</p>
<p style="margin: 1.2em 0px ! important;">Hope this helps,</p>
<div
title="MDH:PGRpdiBjbGFzcz0ibW96LWNpdGUtcHJlZml4Ij5PbiAwNS8yNy8yMDE2IDA0OjU2IEFNLCBQYW5nIExvbmcgd3JvdGU6PGJyPjwvZGl2PjxibG9ja3F1b3RlIGNpdGU9Im1pZDpDQURrWmt2Y3I2eV95
dnpfdlhwOTVwbmhwWEp5bXFZZERXR1YycVdQUUJBR2NoLTR5TkFAbWFpbC5nbWFpbC5jb20iIHR5
cGU9ImNpdGUiPjxkaXYgZGlyPSJsdHIiPjxkaXY+PGRpdj4mbmJzcDsmbmJzcDsmbmJzcDsgVGhh
bmtzIGEgbG90IGZvciB5b3VyIHJlcGx5LiBJJ20gc29ycnkgdG8gcmVwbHkgdG8geW91IHNvIGxh
dGVseS48YnI+PGRpdj4mbmJzcDsmbmJzcDsmbmJzcDsgWW91ciBzdWdnZXN0aW9uIGhlbHAgbWUg
Zml4IHRoYXQgcHJvYmxlbS4gVGhlIElQIGFkZHJlc3Mgd2FzIHdyb25nIGluIC9ldGMvaG9zdHMu
IDxicj4mbmJzcDsgJm5ic3A7IEJ1dCB0aGVyZSBpcyBhIG5ldyBwcm9ibGVtLjxicj4mbmJzcDsg
Jm5ic3A7IG9uIFZNMiwgdGhlIGZvbGxvd2luZyBlcnJvciBpcyByZXBvcnRlZCBpbiAvdmFyL3d3
dy9hcnZhZG9zLWFwaS9zaGFyZWQvbG9nL3Byb2R1Y3Rpb24ubG9nOjxicj5GYXJhZGF5OjpFcnJv
cjo6Q29ubmVjdGlvbkZhaWxlZCAoU1NMX2Nvbm5lY3QgcmV0dXJuZWQ9MSBlcnJubz0wIHN0YXRl
PXVua25vd24gc3RhdGU6IGNlcnRpZmljYXRlIHZlcmlmeSBmYWlsZWQpOjxicj4mbmJzcDsgYXBw
L21pZGRsZXdhcmVzL2FydmFkb3NfYXBpX3Rva2VuLnJiOjU5OmluIGBjYWxsJzxicj48L2Rpdj48
ZGl2PiZuYnNwOyZuYnNwOyZuYnNwOyA8YnI+PC9kaXY+PGRpdj4mbmJzcDsmbmJzcDsmbmJzcDsg
SXMgaXQgZHVlIHRvIG15ICBzZWxmLXNpZ25lZCBjZXJ0aWZpY2F0ZT88YnI+PC9kaXY+PC9kaXY+
PC9kaXY+PC9kaXY+PC9ibG9ja3F1b3RlPkxvbmcsPGJyPjxicj5UaGF0J3MgdGhlIG1vc3QgbGlr
ZWx5IGV4cGxhbmF0aW9uLCB5ZXMuwqAgWW91IGNhbiBjb25maWd1cmUgdGhlIEFQSSBzZXJ2ZXIg
dG8gYWNjZXB0IHRoZSBzZWxmLXNpZ25lZCBjZXJ0aWZpY2F0ZSBieSBzZXR0aW5nIGBzc29faW5z
ZWN1cmU6IHRydWVgIGluIHRoZSBhcHByb3ByaWF0ZSBzZWN0aW9uIG9mIHlvdXIgQVBJIHNlcnZl
cidzIGBhcHBsaWNhdGlvbi55bWxgLjxicj48YnI+V2hlbiB5b3Ugc2V0IHVwIFdvcmtiZW5jaCwg
aWYgeW91ciBBUEkgc2VydmVyIGFsc28gaGFzIGEgc2VsZi1zaWduZWQgY2VydGlmaWNhdGUsIHlv
dSdsbCBzaW1pbGFybHkgbmVlZCB0byBzZXQgYGFydmFkb3NfaW5zZWN1cmVfaHR0cHM6IHRydWVg
IGluIFdvcmtiZW5jaCdzIGBhcHBsaWNhdGlvbi55bWxgLjxicj48YnI+SG9wZSB0aGlzIGhlbHBz
LDxicj48YnI+"
style="height:0;width:0;max-height:0;max-width:0;overflow:hidden;font-size:0em;padding:0;margin:0;"></div>
</div>
<div class="moz-signature markdown-here-signature">-- <br>
Brett Smith<br>
Product Manager, Curoverse</div>
</body>
</html>