Dear all,
I had a similar problem with engine certificate and solved it, reading this thread. The strange thing is that now every time I log on the engine I get warnings about host certificates about to expire, even if the expiry date is in 2023. This looks weird to me and I wonder if there is somewhere a setting to specify how in advance the warning should be given.

Here is an example:



Any hint?
Thanks,

Andrea


On 25/04/2022 14:04, Martin Perina wrote:
Hi Guillaume,

to renew host certificates you need to perform following actions in webadmin or RESTAPI:

1. Move the host to Maintenance status
2. Execute Enroll Certificates for the host
3. Watch Events on the host to see if Enroll Certificates finished successfully
4. Execute Activate for the host

Regards,
Martin

On Mon, Apr 25, 2022 at 1:46 PM Guillaume Pavese <guillaume.pav...@interactiv-group.com> wrote:

    Hello

    We are receiving the following notifications from our ovirt manager  :

        Message:Engine's certification is about to expire at
        2022-05-03. Please renew the engine's certification.
        Severity:WARNING


    Effectively :

        # openssl x509 -in /etc/pki/ovirt-engine/certs/engine.cer
        -startdate -enddate -noout
        notBefore=Mar 30 04:48:15 2021 GMT
        notAfter=May  3 04:48:15 2022 GMT


    However I can not find any documentation on how to renew this
    certificate.
    The following doc only convers changing apache-ca.pem
    & apache.cer, and not engine.cer

        Doc oVirt :
        
https://ovirt.org/documentation/administration_guide/index.html#Replacing_the_Manager_CA_Certificate
        Doc RHV :
        
https://access.redhat.com/documentation/en-us/red_hat_virtualization/4.4/html-single/administration_guide/index#Replacing_the_Manager_CA_Certificate


    Any help ?

    Guillaume Pavese
    IngénieurSystèmeet Réseau
    Interactiv-Group

    Ce message et toutes les pièces jointes (ci-après le “message”)
    sont établis à l’intention exclusive de ses destinataires et sont
    confidentiels. Si vous recevez ce message par erreur, merci de le
    détruire et d’en avertir immédiatement l’expéditeur. Toute
    utilisation de ce message non conforme a sa destination, toute
    diffusion ou toute publication, totale ou partielle, est
    interdite, sauf autorisation expresse. L’internet ne permettant
    pas d’assurer l’intégrité de ce message . Interactiv-group (et ses
    filiales) décline(nt) toute responsabilité au titre de ce message,
    dans l’hypothèse ou il aurait été modifié. IT, ES, UK.
    <https://interactiv-group.com/disclaimer.html>

    _______________________________________________
    Users mailing list -- users@ovirt.org
    To unsubscribe send an email to users-le...@ovirt.org
    Privacy Statement: https://www.ovirt.org/privacy-policy.html
    oVirt Code of Conduct:
    https://www.ovirt.org/community/about/community-guidelines/
    List Archives:
    
https://lists.ovirt.org/archives/list/users@ovirt.org/message/HWHBRHZDCHKRTMV7SK63URREVPHIZQTI/



--
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.

_______________________________________________
Users mailing list --users@ovirt.org
To unsubscribe send an email tousers-le...@ovirt.org
Privacy Statement:https://www.ovirt.org/privacy-policy.html
oVirt Code of 
Conduct:https://www.ovirt.org/community/about/community-guidelines/
List 
Archives:https://lists.ovirt.org/archives/list/users@ovirt.org/message/ROJDGIDLQRMQ6E7HQINUVATYDPLR65QI/

--
Andrea Chierici - INFN-CNAF                     
Viale Berti Pichat 6/2, 40127 BOLOGNA
Office Tel: +39 051 2095463     
SkypeID ataruz
--
_______________________________________________
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/RHEGM7MMANCDDI2U6TBJ5475QLJVQYPR/

Reply via email to