<div dir="ltr">Didi, Sandro - Do you know if this option VdsCertificateValidityInYears is present in 4.2?<br></div><div class="gmail_extra"><br><div class="gmail_quote">On Mon, Mar 19, 2018 at 4:43 AM, Punaatua PAINT-KOUI <span dir="ltr"><<a href="mailto:punaatua.pk@gmail.com" target="_blank">punaatua.pk@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Up</div><div class="gmail_extra"><div><div class="h5"><br><div class="gmail_quote">2018-02-17 2:57 GMT-10:00 Punaatua PAINT-KOUI <span dir="ltr"><<a href="mailto:punaatua.pk@gmail.com" target="_blank">punaatua.pk@gmail.com</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="auto">Any idea someone ?</div><div class="gmail_extra"><br><div class="gmail_quote">Le 14 févr. 2018 23:19, "Punaatua PAINT-KOUI" <<a href="mailto:punaatua.pk@gmail.com" target="_blank">punaatua.pk@gmail.com</a>> a écrit :<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">
<div dir="ltr" style="outline:none;color:rgb(18,18,18);font-family:Arial,Helvetica,sans-serif;font-size:14px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial">Hi,</div><div dir="ltr" style="outline:none;color:rgb(18,18,18);font-family:Arial,Helvetica,sans-serif;font-size:14px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial"> </div><div dir="ltr" style="outline:none;color:rgb(18,18,18);font-family:Arial,Helvetica,sans-serif;font-size:14px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial">I setup an hyperconverged solution with 3 nodes, hosted engine on glusterfs.</div><div dir="ltr" style="outline:none;color:rgb(18,18,18);font-family:Arial,Helvetica,sans-serif;font-size:14px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial">We run this setup in a PCI-DSS environment. According to PCI-DSS requirements, we are required to reduce the validity of any certificate under 39 months.</div><div dir="ltr" style="outline:none;color:rgb(18,18,18);font-family:Arial,Helvetica,sans-serif;font-size:14px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial"> </div><div dir="ltr" style="outline:none;color:rgb(18,18,18);font-family:Arial,Helvetica,sans-serif;font-size:14px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial">I saw in this link <a href="https://www.ovirt.org/develop/release-management/features/infra/pki/" rel="noopener" style="outline:none;color:rgb(65,120,190)" target="_blank">https://www.ovirt.org/dev<wbr>elop/release-management/featur<wbr>es/infra/pki/</a> that i can use the option VdsCertificateValidityInYears at engine-config.</div><div dir="ltr" style="outline:none;color:rgb(18,18,18);font-family:Arial,Helvetica,sans-serif;font-size:14px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial"> </div><div dir="ltr" style="outline:none;color:rgb(18,18,18);font-family:Arial,Helvetica,sans-serif;font-size:14px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial">I'm running ovirt engine 4.2.1 and i checked when i was on 4.2 how to edit the option with engine-config --all and engine-config --list but the option is not listed</div><div dir="ltr" style="outline:none;color:rgb(18,18,18);font-family:Arial,Helvetica,sans-serif;font-size:14px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial"> </div><div dir="ltr" style="outline:none;color:rgb(18,18,18);font-family:Arial,Helvetica,sans-serif;font-size:14px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial">Am i missing something ?</div><div dir="ltr" style="outline:none;color:rgb(18,18,18);font-family:Arial,Helvetica,sans-serif;font-size:14px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial"> </div><div dir="ltr" style="outline:none;color:rgb(18,18,18);font-family:Arial,Helvetica,sans-serif;font-size:14px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial">I thing i can regenerate a VDSM certificate with openssl and the CA conf in /etc/pki/ovirt-engine on the hosted-engine but i would rather modifiy the option for future host that I will add.</div><span class="m_-8280819287129231373HOEnZb"><font color="#888888">
<div><br></div>-- <br><div class="m_-8280819287129231373m_-4648220899779301241m_6998394127379012235gmail_signature" data-smartmail="gmail_signature">------------------------------<wbr>-------<br>PAINT-KOUI Punaatua<br></div>
</font></span></div>
</blockquote></div></div>
</blockquote></div><br><br clear="all"><div><br></div></div></div><span class="HOEnZb"><font color="#888888">-- <br><div class="m_-8280819287129231373gmail_signature" data-smartmail="gmail_signature">------------------------------<wbr>-------<br>PAINT-KOUI Punaatua<br>Licence Pro Réseaux et Télecom IAR<br>Université du Sud Toulon Var<br>La Garde France<br></div>
</font></span></div>
<br>______________________________<wbr>_________________<br>
Users mailing list<br>
<a href="mailto:Users@ovirt.org">Users@ovirt.org</a><br>
<a href="http://lists.ovirt.org/mailman/listinfo/users" rel="noreferrer" target="_blank">http://lists.ovirt.org/<wbr>mailman/listinfo/users</a><br>
<br></blockquote></div><br></div>