<html><body>
<h3>Evgheni Dereveanchin created OVIRT-1994:</h3>
<pre> Summary: foreman certs about to expire
Key: OVIRT-1994
URL: https://ovirt-jira.atlassian.net/browse/OVIRT-1994
Project: oVirt - virtualization made easy
Issue Type: Task
Reporter: Evgheni Dereveanchin
Assignee: infra
Priority: High</pre>
<p>The oVirt Foreman was deployed on 05.05.2013 and soon most of the certs issued at that time will expire.</p>
<p>Here's a message shown on one of the older systems under its management: Warning: Certificate ‘Puppet CA: foreman.ovirt.org’ will expire on 2018-05-05T19:41:35GMT Warning: Certificate ‘foreman.ovirt.org’ will expire on 2018-07-02T13:50:12GMT Warning: Certificate ‘monitoring.ovirt.org’ will expire on 2018-05-28T15:32:20GMT</p>
<p>So the CA certificate is expiring this week, the puppetmaster one – in two months and some client certs – even sooner than that.</p>
<p>A possible fix is to generate new CA and puppetmaster certificates using original CSRs, then delete /var/lib/puppet/ssl/certs/ca.pem on clients and most of them should keep working since their own certs will still be signed using the same keys.</p>
<p>— This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100083)</p>
<img src="https://u4043402.ct.sendgrid.net/wf/open?upn=i5TMWGV99amJbNxJpSp2-2BJ33BSM3tuiUfRTk64K-2BOjHVixifWxe-2FeCnf2feBTTo04LraL7gSdAIqhTpgpf4CdF-2BQCxd5-2Fr42wd8kpk8l4YO1FAiYxuund4d9tUc3vfGNWhF0pbt6f-2BjUwsbL-2Fk72snAQ-2Bmd2LFEWvu-2BFpgHKmiFpxa-2BPbU2wNCr-2FU1rCRf1U7bVItop4OHnyhrGtor5S3d-2FGKUJX8sOIa24nwZ-2F5x2jFc-2B4lBUpR54wpBV-2BGKbsOpWfwdBXMiNuuUIFoEIrsPjLvMrIe36oXEgNFY-2BLGpI-2BEzEpVmrQasZPxuv1ilMnqsrhNNrxJC27SJt6-2FtSRthdYaOGJju7p1G3iRwiOxdK61X5xGNm0A1zqTNVGVCZdb5IuGiSEP0GG-2Be1IDDV3CksewZl4zC2NMpODQhNRQWtTkN3A-2BLbi4wh3UqRJPf0zZddRGBapHYN3gMiD-2FO4Tk4A-3D-3D" alt="" width="1" height="1" border="0" style="height:1px !important;width:1px !important;border-width:0 !important;margin-top:0 !important;margin-bottom:0 !important;margin-right:0 !important;margin-left:0 !important;padding-top:0 !important;padding-bottom:0 !important;padding-right:0 !important;padding-left:0 !important;"/>
</body></html>