Thank you Didi,

I can confirm that engine-setup detected the approaching expiration of the engine certificate and proposed to renew it.

We'll try proposing a documentation fix

Guillaume Pavese
Ingénieur Système et Réseau

Interactiv-Group

On Mon, Apr 25, 2022 at 9:02 PM Yedidyah Bar David <didi@redhat.com> wrote:

On Mon, Apr 25, 2022 at 2:45 PM Guillaume Pavese
<guillaume.pavese@interactiv-group.com> wrote:
>
> Hello
>
> We are receiving the following notifications from our ovirt manager  :
>
> Message:Engine's certification is about to expire at 2022-05-03. Please renew the engine's certification.
> Severity:WARNING
>
>
> Effectively :
>
> # openssl x509 -in /etc/pki/ovirt-engine/certs/engine.cer -startdate -enddate -noout
> notBefore=Mar 30 04:48:15 2021 GMT
> notAfter=May  3 04:48:15 2022 GMT
>
>
> However I can not find any documentation on how to renew this certificate.
> The following doc only convers changing apache-ca.pem & apache.cer, and not engine.cer
>
> Doc oVirt : https://ovirt.org/documentation/administration_guide/index.html#Replacing_the_Manager_CA_Certificate
> Doc RHV : https://access.redhat.com/documentation/en-us/red_hat_virtualization/4.4/html-single/administration_guide/index#Replacing_the_Manager_CA_Certificate
>
>
> Any help ?

Please try running 'engine-setup'. If you want to prevent it from
upgrading the engine, you can try 'engine-setup --offline'.

You might want to create a github issue about the documentation
missing this information. If you do, please clarify where you expected
it to appear and what you searched for when looking for it.
Alternatively, patches are welcome :-), the oVirt documentation is
managed in a github repo, with a link in each page "Edit this page".

Good luck and best regards,
--
Didi

Ce message et toutes les pièces jointes (ci-après le “message”) sont établis à l’intention exclusive de ses destinataires et sont confidentiels. Si vous recevez ce message par erreur, merci de le détruire et d’en avertir immédiatement l’expéditeur. Toute utilisation de ce message non conforme a sa destination, toute diffusion ou toute publication, totale ou partielle, est interdite, sauf autorisation expresse. L’internet ne permettant pas d’assurer l’intégrité de ce message . Interactiv-group (et ses filiales) décline(nt) toute responsabilité au titre de ce message, dans l’hypothèse ou il aurait été modifié. IT, ES, UK. 

_______________________________________________
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-leave@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/
List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/BN23FQXEWIMIPT5N5B3GH3SZ3IYIX2KP/