I think you are looking for certmonger, but it will require some manual steps:On 09/30/2021 23:38, Strahil Nikolov via Users wrote:https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/system-level_authentication_guide/certmongerxBest Regards,Strahil Nikolov
On Thu, Sep 30, 2021 at 10:17, Tommy Sway<sz_cuitao@163.com> wrote:_______________________________________________As you know, there are many kinds of certificates in Ovirt, used for communication, authentication and so on.
However, in practice, there is a security risk related to the above certificates.
That is, you need to generate a new certificate after the certificate expires. Otherwise, a problem will occur.
In addition, different certificates expire at different times, which brings a lot of management trouble to users.
Especially in the production system, a huge virtualization cluster may run thousands of VMS. If a cluster certificate has a problem, the impact is very serious.
So I felt there was an urgent need for a technical tool that could help users quickly locate certificates, identify their expiration dates, and rebuild them.
Even if there is no tool, there should be a way to solve the problems caused by partial certificate expiration. I think it should include the following points:
First, how to list the certificate in detail
Second, how to check the certificate expiration time
Third, how to rebuild the certificate
Does anyone else have this kind of confusion? What's a good solution?
Thanks.
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-leave@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/
List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/3WFDWAZ2ZE6L44YAYXK7Q5NUNZSDR4AU/