DennisKonrad commented on issue #2930: HA for Management Server - roundrobin: 
Certificate ownership
URL: https://github.com/apache/cloudstack/issues/2930#issuecomment-438455586
 
 
   @rhtyd Starting one management up and later adding the second one did not 
work.
   
   So I tried the following with one of two management server running:
   
   1. set auth strictness = false (restart management afterwards)
   2. stop management server (both off now)
   3. backup/clear db keys:
        ca.plugin.root.private.key
        ca.plugin.root.public.key
        ca.plugin.root.ca.certificate
   4. start first mgmt-server and wait for completion of reissue
   
   After that I could not use the "provisionCertificate" api call because all 
hosts were disconnected.
   I thought the "ca.plugin.root.auth.strictness" would allow me to push the 
new certificates to all hosts.
   
   Your help is very appreciated and rephrasing (or restating how you call it) 
helps to figure out what could be wrong here. A thorough investigation will 
also help others with similar problems. Thanks for that

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


With regards,
Apache Git Services

Reply via email to