Hi Folks,
like many others, the ovirt hosted engine certificates expired on my installation. We
tried to follow this knowledge base article:
https://access.redhat.com/solutions/6865861
I set the host which runs the hosted engine via the "hosted-engine --set-maintenance
--mode=global" command into the global maintenance mode.
Then i try to execute the "engine-setup --offline" command. There we anwser all
questions and the script recognizes the expired certificates. But when we try to execute
the last step it aborts with following error message.
Output of engine-setup --offline:
[WARNING] Failed to read or parse '/etc/pki/ovirt-engine/keys/apache.p12'
Perhaps it was changed since last Setup.
Error was:
Mac verify error: invalid password?
One or more of the certificates should be renewed, because they expire soon, or
include an invalid expiry date, or they were created with validity period longer than 398
days, or do not include the subjectAltName extension, which can cause them to be rejected
by recent browsers and up to date hosts.
See
https://www.ovirt.org/develop/release-management/features/infra/pki-renew/
for more details.
Renew certificates? (Yes, No) [No]: Yes
--== APACHE CONFIGURATION ==--
--== SYSTEM CONFIGURATION ==--
--== MISC CONFIGURATION ==--
--== END OF CONFIGURATION ==--
[ INFO ] Stage: Setup validation
During execution engine service will be stopped (OK, Cancel) [OK]: Ok
[ ERROR ] It seems that you are running your engine inside of the hosted-engine VM and are
not in "Global Maintenance" mode.
In that case you should put the system into the "Global Maintenance"
mode before running engine-setup, or the hosted-engine HA agent might kill the machine,
which might corrupt your data.
[ ERROR ] Failed to execute stage 'Setup validation': Hosted Engine setup
detected, but Global Maintenance is not set.
[ INFO ] Stage: Clean up
Log file is located at
/var/log/ovirt-engine/setup/ovirt-engine-setup-20220701205812-yu1osl.log
[ INFO ] Generating answer file
'/var/lib/ovirt-engine/setup/answers/20220701205843-setup.conf'
[ INFO ] Stage: Pre-termination
[ INFO ] Stage: Termination
[ ERROR ] Execution of setup failed
Any ideas how to get the hosted engine into global maintenance mode?
Thanks for your help in advance!
Best Regard
J. Lutz