I should have known better.
Deleting /etc/pki/vdsm and re-installing VDSM solved it.
There is probably a smarter/simpler way to do this (delete the folder and run 'vdsm-tool configure --force'?).
yes, more specifically: `vdsm-tool configure --module certificates`
I would expect running it or the other general version to replace the existing expired certificate.
At the minimum it should check and tell me what should I do.
I have a VM which acts as an oVirt host with VDSM installed. I use it for testing without connecting it to Engine.
Recently VDSM fails to come up and I see this error:
Sep 26 17:58:18 localhost libvirtd: 2018-09-26 14:58:18.978+0000: 12176: error : virNetTLSContextCheckCertTimes:154 : The server certificate /etc/pki/vdsm/certs/vdsmcert.pem has expired
Congratulations, you've been using the same deployment for a year!
I’m pretty sure I never had to delete that folder until now. Vdsm is built, installed and removed in an endless loop on a regular basis (including the configured part).