Maybe you don't use ovirt-ovn. Also, we don't use it either.

You can check these certs too:

 

/etc/pki/ovirt-engine/certs/ovn-ndb.cer

/etc/pki/ovirt-engine/certs/ovn-sdb.cer 

 

Tibor

---

Feladó: carl <crl.langlois@gmail.com>
Címzett: Demeter <tdemeter@itsmart.hu>
Másolat: Darrell <budic@onholyground.com>; users <users@ovirt.org>
Dátum: 2023. március 10., péntek 14:46 CET
Tantárgy: Re: [ovirt-users] Re: renew certificates

Yes:

ticket was good till Dec 23 2022

and last system boot 2022-12-31

 

Regards

Carl

On Fri, Mar 10, 2023 at 8:39 AM Demeter Tibor <tdemeter@itsmart.hu> wrote:

Dear Carl,

 

I don't know but I don't wanna try what will happen if it sets to expire...

 

Have you restart the ovirt-engine since that is expired?

Thanks

 

Tibor

 

 

---

Feladó: carl <crl.langlois@gmail.com>
Címzett: Demeter <tdemeter@itsmart.hu>
Másolat: Darrell <budic@onholyground.com>; users <users@ovirt.org>
Dátum: 2023. március 10., péntek 14:32 CET
Tantárgy: Re: [ovirt-users] Re: renew certificates

Hi Tibor,

 

You are right. This certificate expired last December and was not renewed.  Why am I not seeing any issue? 

 

Regards

Carl

On Fri, Mar 10, 2023 at 8:16 AM Demeter Tibor <tdemeter@itsmart.hu> wrote:

Dear Carl,

 

Yes, I did exactly same with our 4.3 system at last summer. But it didn't renew all of certificates.

 

You can check it with this command:

 

openssl x509 -in /etc/pki/ovirt-engine/certs/ovirt-provider-ovn.cer -noout -dates

 

Thank you.

 

Regards

Tibor

 

 

---

Feladó: carl <crl.langlois@gmail.com>
Címzett: Demeter <tdemeter@itsmart.hu>
Másolat: Darrell <budic@onholyground.com>; users <users@ovirt.org>
Dátum: 2023. március 10., péntek 12:48 CET
Tantárgy: Re: [ovirt-users] Re: renew certificates

Hi,

 

I remember having certificats expired back in décembre.  I am still on 4.3 and engine-setup did renew the certificat.  So not sure why it is not doing it on your side.

 

Regards 

Carl

Le ven. 10 mars 2023, 04 h 04, Demeter Tibor <tdemeter@itsmart.hu> a écrit :

Dear Darell,

 

Thank you for your reply.

That solution is not working on 4.3, because engine-setup does not renew these certs. It was a bug and it was resolved in 4.5.2.

Any other suggestion?

Thanks

Regards

Tibor

 

 

---

Feladó: Darrell <budic@onholyground.com>
Címzett: Demeter <tdemeter@itsmart.hu>
Másolat: users <users@ovirt.org>
Dátum: 2023. március 9., csütörtök 17:44 CET
Tantárgy: Re: [ovirt-users] renew certificates

Run engine-setup on your engine, it should ask to renew the cert and CA for you.

 

  -Darrell

On Mar 9, 2023, at 6:19 AM, Demeter Tibor <tdemeter@itsmart.hu> wrote:

Dear listmembers,

 

We have an ovirt 4.3 hyperconverged system and couple certificates will expire in next month.

 

/etc/pki/ovirt-engine/certs/ovirt-provider-ovn         Apr 11 08:16:33 2023 GMT

  /etc/pki/ovirt-engine/certs/ovn-ndb.cer                Apr 11 08:16:32 2023 GMT

  /etc/pki/ovirt-engine/certs/ovn-sdb.cer                Apr 11 08:16:32 2023 GMT

 

How can I renew these certficates?

Thanks in advance,

Regards

Tibor

_______________________________________________
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-leave@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/
List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/VH7LJ3UXPKY6MUPPNPAW5HBBP5OKMCXX/

_______________________________________________
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-leave@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/
List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/3JIJ2P5SUNQAF7XIOOD4PVH7PDW3Q777/