On Sun, Mar 20, 2022 at 2:13 PM Mikhail Po <porsevm@gmail.com> wrote:

When we perform point 6 of section "Replacing All Signed Certificates with SHA-256" https://access.redhat.com/documentation/en-us/red_hat_virtualization/4.4/htm... an error occurs:

Ignoring -days; not generating a certificate Using configuration from openssl.conf Check that the request matches the signature Signature ok name is expected to be in the format /type0=value0/type1=value1/type2=... where characters may be escaped by \. This name is not in that format: 'subject=C = US, O = domain.com, CN = ovirt01.domain.com' Cannot sign certificate Cannot sign request ...

Which versions of ovirt-engine and openssl do you use? Thanks. Best regards, -- Didi