[SOLVED] SSL certificate not working on VNC console

[wkpsfbx]

When I try to open a console window on a VM I get the "Your security settings have blocked a self-signed application from running", even though the main site works fine with my Comodo cert.

The certs I received from Comodo were the root, 2 intermediate ones, and the mydomain.com one.

I included the intermediate ones in both pve-ssl.pem and pve-root-ca.pem, cleared java cache, my browser cache, and restarted pveproxy and pvedaemon, but it still doesn't seem to work.



Edit:

Testing my site with digicert.com tells me that there were no certificates found. However, visiting the site with Chrome (or any browser) indicates that there are proper certificates in place. Not sure what to make of that...

Edit2:

Alright, I got past the alleged lack of certification (bypassed with java settings, not fixed), and now there's this:

Edit3: after clearing the browser cache, the error changed to this:

EDIT4:

Alright. Reverting back to self-signed certificates fixed the problem. How can I make the VNC work with trusted certs?

FINAL EDIT:


Solved by messing with the order of the certs pasted in pve-root-ca.pem and pve-ssl.pem.