如何在VMware vCenter 6.5中信任第三方证书？

Question

我有一个vCenter 6.5服务器和一个名为iso的内容库。我想从https://mirror.us-midwest-1.nexcess.net/CentOS/7.4.1708/isos/x86_64/CentOS-7-x86_64-Everything-1708.iso进口C1 7.4。但是，在这样做时，导入失败时会出现以下错误：

A general system error occurred: The import of library item ff47df87-2352-4714-a321-7d2cdc699999 has failed. Reason: InternalServerError (com.vmware.vapi.std.errors.internal_server_error) => { messages = [LocalizableMessage (com.vmware.vapi.std.localizable_message) => { id = com.vmware.vdcs.cls-main.error_while_transferring_from, defaultMessage = Error transferring file CentOS-7-x86_64-Everything-1708.iso from https://mirror.us-midwest-1.nexcess.net/CentOS/7.4.1708/isos/x86_64/CentOS-7-x86_64-Everything-1708.iso. Reason: Server not trusted: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target, args = [CentOS-7-x86_64-Everything-1708.iso, https://mirror.us-midwest-1.nexcess.net/CentOS/7.4.1708/isos/x86_64/CentOS-7-x86_64-Everything-1708.iso, Server not trusted: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target] }], data = }.

服务器https://mirror.us-midwest-1.nexcess.net/有一个Commodo证书。其他下载站点使用“让我们加密证书”。

如何将这些证书颁发机构的根证书和中间证书添加到vCenter，以便我可以从互联网上下载ISO映像？

我一直在看文档，却找不到任何文档。

Answer 1

我还没有尝试过这种方法，但是也许您可以通过条目创建将根CA添加到TRUSTED_ROOTS中。