[ovirt-users] Re: VDSM certs expired, manual renewal not working

2023-05-04 Thread michael . d1 . holt
How did you update keys/engine.p12? ___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct:

[ovirt-users] Re: VDSM certs expired, manual renewal not working

2023-03-10 Thread cen
I did not but I finally found the issue, what a ride this was.. After updating keys/engine.p12 hosts finally showed up. While there are probably more certs outdated and some parts not working now I can finally do regular enrollments. I was right all along, the auth cert was causing the

[ovirt-users] Re: VDSM certs expired, manual renewal not working

2023-03-10 Thread Patrick Chiang
Hi, Yes, that is the exact guide I followed. > I can now actually use vdsm-client on each host after cert swap but > ovirt-engine still can't establish connection. > > I had to manually generate the apache certs to get into the UI console at > the beginning and that was successful. > > Is there a

[ovirt-users] Re: VDSM certs expired, manual renewal not working

2023-03-09 Thread cen
Yes, that is the exact guide I followed. I can now actually use vdsm-client on each host after cert swap but ovirt-engine still can't establish connection. I had to manually generate the apache certs to get into the UI console at the beginning and that was successful. Is there a specific

[ovirt-users] Re: VDSM certs expired, manual renewal not working

2023-03-09 Thread Patrick Chiang
Hi, Where do host certs need to be stored on the ovirt-engine side? > Did you try this link? https://access.redhat.com/solutions/3532921 How to manually renew RHV host SSL certificate if expired? You can register a Red Hat developer subscription (free) to access this link. Patrick

[ovirt-users] Re: VDSM certs expired, manual renewal not working

2023-03-09 Thread cen
To continue the troubleshooting, I believe there is mutual SSL between ovirt-engine and host so I think what I am missing is to put this new cert for ovirt-engine to use it as client cert auth. But where to put it? I noticed that generating the cert does not put it in