https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/system-level_authentication_guide/certmongerx

Best Regards,

Strahil Nikolov

On Thu, Sep 30, 2021 at 10:17, Tommy Sway
<sz_cuitao@163.com> wrote:

As you know, there are many kinds of certificates in Ovirt, used for communication, authentication and so on.
However, in practice, there is a security risk related to the above certificates.

That is, you need to generate a new certificate after the certificate expires. Otherwise, a problem will occur.
In addition, different certificates expire at different times, which brings a lot of management trouble to users.
Especially in the production system, a huge virtualization cluster may run thousands of VMS. If a cluster certificate has a problem, the impact is very serious.

So I felt there was an urgent need for a technical tool that could help users quickly locate certificates, identify their expiration dates, and rebuild them.
Even if there is no tool, there should be a way to solve the problems caused by partial certificate expiration. I think it should include the following points:
First, how to list the certificate in detail
Second, how to check the certificate expiration time
Third, how to rebuild the certificate

Does anyone else have this kind of confusion? What's a good solution?

Thanks.
_______________________________________________
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-leave@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/
List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/3WFDWAZ2ZE6L44YAYXK7Q5NUNZSDR4AU/