I remember having this issue trying to replace my dead centos8 hosted engine on to new
physical host running centos9 stream. The issues was that rc2 is not supported in el9, no
matter what, i used openssl to convert all all p12 in /etc/pki/ovirt-engine/keys to use
aes instead.