Maybe you don't use ovirt-ovn. Also, we don't use it either.
You can check these certs too:
 
/etc/pki/ovirt-engine/certs/ovn-ndb.cer
/etc/pki/ovirt-engine/certs/ovn-sdb.cer 
 
Tibor



Feladó: carl <crl.langlois@gmail.com>
Címzett: Demeter <tdemeter@itsmart.hu>
Másolat: Darrell <budic@onholyground.com>; users <users@ovirt.org>
Dátum: 2023. március 10., péntek 14:46 CET
Tantárgy: Re: [ovirt-users] Re: renew certificates

Yes:
ticket was good till Dec 23 2022
and last system boot 2022-12-31
 
Regards
Carl

On Fri, Mar 10, 2023 at 8:39 AM Demeter Tibor <tdemeter@itsmart.hu> wrote:
Dear Carl,
 
I don't know but I don't wanna try what will happen if it sets to expire...
 
Have you restart the ovirt-engine since that is expired?
Thanks
 
Tibor
 
 



Feladó: carl <crl.langlois@gmail.com>
Címzett: Demeter <tdemeter@itsmart.hu>
Másolat: Darrell <budic@onholyground.com>; users <users@ovirt.org>
Dátum: 2023. március 10., péntek 14:32 CET
Tantárgy: Re: [ovirt-users] Re: renew certificates

Hi Tibor,
 
You are right. This certificate expired last December and was not renewed.  Why am I not seeing any issue? 
 
Regards
Carl

On Fri, Mar 10, 2023 at 8:16 AM Demeter Tibor <tdemeter@itsmart.hu> wrote:
Dear Carl,
 
Yes, I did exactly same with our 4.3 system at last summer. But it didn't renew all of certificates.
 
You can check it with this command:
 
openssl x509 -in /etc/pki/ovirt-engine/certs/ovirt-provider-ovn.cer -noout -dates
 
Thank you.
 
Regards
Tibor
 
 



Feladó: carl <crl.langlois@gmail.com>
Címzett: Demeter <tdemeter@itsmart.hu>
Másolat: Darrell <budic@onholyground.com>; users <users@ovirt.org>
Dátum: 2023. március 10., péntek 12:48 CET
Tantárgy: Re: [ovirt-users] Re: renew certificates

Hi,
 
I remember having certificats expired back in décembre.  I am still on 4.3 and engine-setup did renew the certificat.  So not sure why it is not doing it on your side.
 
Regards 
Carl

Le ven. 10 mars 2023, 04 h 04, Demeter Tibor <tdemeter@itsmart.hu> a écrit :
Dear Darell,
 
Thank you for your reply.
That solution is not working on 4.3, because engine-setup does not renew these certs. It was a bug and it was resolved in 4.5.2.
Any other suggestion?
Thanks
Regards
Tibor
 
 



Feladó: Darrell <budic@onholyground.com>
Címzett: Demeter <tdemeter@itsmart.hu>
Másolat: users <users@ovirt.org>
Dátum: 2023. március 9., csütörtök 17:44 CET
Tantárgy: Re: [ovirt-users] renew certificates

Run engine-setup on your engine, it should ask to renew the cert and CA for you.
 
  -Darrell

On Mar 9, 2023, at 6:19 AM, Demeter Tibor <tdemeter@itsmart.hu> wrote:
Dear listmembers,
 
We have an ovirt 4.3 hyperconverged system and couple certificates will expire in next month.
 
/etc/pki/ovirt-engine/certs/ovirt-provider-ovn         Apr 11 08:16:33 2023 GMT
  /etc/pki/ovirt-engine/certs/ovn-ndb.cer                Apr 11 08:16:32 2023 GMT
  /etc/pki/ovirt-engine/certs/ovn-sdb.cer                Apr 11 08:16:32 2023 GMT
 
How can I renew these certficates?
Thanks in advance,
Regards
Tibor
_______________________________________________
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-leave@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/
List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/VH7LJ3UXPKY6MUPPNPAW5HBBP5OKMCXX/
_______________________________________________
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-leave@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/
List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/3JIJ2P5SUNQAF7XIOOD4PVH7PDW3Q777/