On Mar 9, 2023, at 6:19 AM, Demeter Tibor <tdemeter(a)itsmart.hu&gt; wrote: Dear listmembers, We have an ovirt 4.3 hyperconverged system and couple certificates will expire in next month. /etc/pki/ovirt-engine/certs/ovirt-provider-ovn Apr 11 08:16:33 2023 GMT /etc/pki/ovirt-engine/certs/ovn-ndb.cer Apr 11 08:16:32 2023 GMT /etc/pki/ovirt-engine/certs/ovn-sdb.cer Apr 11 08:16:32 2023 GMT How can I renew these certficates? Thanks in advance, Regards Tibor _______________________________________________ Users mailing list -- users(a)ovirt.org To unsubscribe send an email to users-leave(a)ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/VH7LJ3UXPKY...

Dear Darell, Thank you for your reply. That solution is not working on 4.3, because engine-setup does not renew these certs. It was a bug and it was resolved in 4.5.2. Any other suggestion? Thanks Regards Tibor ------------------------------ *Feladó: *Darrell <budic(a)onholyground.com&gt; *Címzett: *Demeter <tdemeter(a)itsmart.hu&gt; *Másolat: *users <users(a)ovirt.org&gt; *Dátum: *2023. március 9., csütörtök 17:44 CET *Tantárgy: *Re: [ovirt-users] renew certificates Run engine-setup on your engine, it should ask to renew the cert and CA for you. -Darrell On Mar 9, 2023, at 6:19 AM, Demeter Tibor <tdemeter(a)itsmart.hu&gt; wrote: Dear listmembers, We have an ovirt 4.3 hyperconverged system and couple certificates will expire in next month. /etc/pki/ovirt-engine/certs/ovirt-provider-ovn Apr 11 08:16:33 2023 GMT /etc/pki/ovirt-engine/certs/ovn-ndb.cer Apr 11 08:16:32 2023 GMT /etc/pki/ovirt-engine/certs/ovn-sdb.cer Apr 11 08:16:32 2023 GMT How can I renew these certficates? Thanks in advance, Regards Tibor _______________________________________________ Users mailing list -- users(a)ovirt.org To unsubscribe send an email to users-leave(a)ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/VH7LJ3UXPKY... _______________________________________________ Users mailing list -- users(a)ovirt.org To unsubscribe send an email to users-leave(a)ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/3JIJ2P5SUNQ...

Dear Carl, Yes, I did exactly same with our 4.3 system at last summer. But it didn't renew all of certificates. You can check it with this command: openssl x509 -in /etc/pki/ovirt-engine/certs/ovirt-provider-ovn.cer -noout -dates Thank you. Regards Tibor ------------------------------ *Feladó: *carl <crl.langlois(a)gmail.com&gt; *Címzett: *Demeter <tdemeter(a)itsmart.hu&gt; *Másolat: *Darrell <budic(a)onholyground.com>; users <users(a)ovirt.org&gt; *Dátum: *2023. március 10., péntek 12:48 CET *Tantárgy: *Re: [ovirt-users] Re: renew certificates Hi, I remember having certificats expired back in décembre. I am still on 4.3 and engine-setup did renew the certificat. So not sure why it is not doing it on your side. Regards Carl Le ven. 10 mars 2023, 04 h 04, Demeter Tibor <tdemeter(a)itsmart.hu&gt; a écrit : > Dear Darell, > > Thank you for your reply. > That solution is not working on 4.3, because engine-setup does not renew > these certs. It was a bug and it was resolved in 4.5.2. > Any other suggestion? > Thanks > Regards > Tibor > > > > > ------------------------------ > *Feladó: *Darrell <budic(a)onholyground.com&gt; > *Címzett: *Demeter <tdemeter(a)itsmart.hu&gt; > *Másolat: *users <users(a)ovirt.org&gt; > *Dátum: *2023. március 9., csütörtök 17:44 CET > *Tantárgy: *Re: [ovirt-users] renew certificates > > Run engine-setup on your engine, it should ask to renew the cert and CA > for you. > > -Darrell > > On Mar 9, 2023, at 6:19 AM, Demeter Tibor <tdemeter(a)itsmart.hu&gt; wrote: > Dear listmembers, > > We have an ovirt 4.3 hyperconverged system and couple certificates will > expire in next month. > > /etc/pki/ovirt-engine/certs/ovirt-provider-ovn Apr 11 08:16:33 > 2023 GMT > /etc/pki/ovirt-engine/certs/ovn-ndb.cer Apr 11 08:16:32 > 2023 GMT > /etc/pki/ovirt-engine/certs/ovn-sdb.cer Apr 11 08:16:32 > 2023 GMT > > How can I renew these certficates? > Thanks in advance, > Regards > Tibor > _______________________________________________ > Users mailing list -- users(a)ovirt.org > To unsubscribe send an email to users-leave(a)ovirt.org > Privacy Statement: https://www.ovirt.org/privacy-policy.html > oVirt Code of Conduct: > https://www.ovirt.org/community/about/community-guidelines/ > List Archives: > https://lists.ovirt.org/archives/list/users@ovirt.org/message/VH7LJ3UXPKY... > > _______________________________________________ > Users mailing list -- users(a)ovirt.org > To unsubscribe send an email to users-leave(a)ovirt.org > Privacy Statement: https://www.ovirt.org/privacy-policy.html > oVirt Code of Conduct: > https://www.ovirt.org/community/about/community-guidelines/ > List Archives: > https://lists.ovirt.org/archives/list/users@ovirt.org/message/3JIJ2P5SUNQ...

Dear Carl, I don't know but I don't wanna try what will happen if it sets to expire... Have you restart the ovirt-engine since that is expired? Thanks Tibor ------------------------------ *Feladó: *carl <crl.langlois(a)gmail.com&gt; *Címzett: *Demeter <tdemeter(a)itsmart.hu&gt; *Másolat: *Darrell <budic(a)onholyground.com>; users <users(a)ovirt.org&gt; *Dátum: *2023. március 10., péntek 14:32 CET *Tantárgy: *Re: [ovirt-users] Re: renew certificates Hi Tibor, You are right. This certificate expired last December and was not renewed. Why am I not seeing any issue? Regards Carl On Fri, Mar 10, 2023 at 8:16 AM Demeter Tibor <tdemeter(a)itsmart.hu&gt; wrote: > Dear Carl, > > Yes, I did exactly same with our 4.3 system at last summer. But it didn't > renew all of certificates. > > You can check it with this command: > > openssl x509 -in /etc/pki/ovirt-engine/certs/ovirt-provider-ovn.cer > -noout -dates > > Thank you. > > Regards > Tibor > > > > > ------------------------------ > *Feladó: *carl <crl.langlois(a)gmail.com&gt; > *Címzett: *Demeter <tdemeter(a)itsmart.hu&gt; > *Másolat: *Darrell <budic(a)onholyground.com>; users <users(a)ovirt.org&gt; > *Dátum: *2023. március 10., péntek 12:48 CET > *Tantárgy: *Re: [ovirt-users] Re: renew certificates > > Hi, > > I remember having certificats expired back in décembre. I am still on > 4.3 and engine-setup did renew the certificat. So not sure why it is not > doing it on your side. > > Regards > Carl > > Le ven. 10 mars 2023, 04 h 04, Demeter Tibor <tdemeter(a)itsmart.hu&gt; a > écrit : > >> Dear Darell, >> >> Thank you for your reply. >> That solution is not working on 4.3, because engine-setup does not renew >> these certs. It was a bug and it was resolved in 4.5.2. >> Any other suggestion? >> Thanks >> Regards >> Tibor >> >> >> >> >> ------------------------------ >> *Feladó: *Darrell <budic(a)onholyground.com&gt; >> *Címzett: *Demeter <tdemeter(a)itsmart.hu&gt; >> *Másolat: *users <users(a)ovirt.org&gt; >> *Dátum: *2023. március 9., csütörtök 17:44 CET >> *Tantárgy: *Re: [ovirt-users] renew certificates >> >> Run engine-setup on your engine, it should ask to renew the cert and CA >> for you. >> >> -Darrell >> >> On Mar 9, 2023, at 6:19 AM, Demeter Tibor <tdemeter(a)itsmart.hu&gt; wrote: >> Dear listmembers, >> >> We have an ovirt 4.3 hyperconverged system and couple certificates will >> expire in next month. >> >> /etc/pki/ovirt-engine/certs/ovirt-provider-ovn Apr 11 08:16:33 >> 2023 GMT >> /etc/pki/ovirt-engine/certs/ovn-ndb.cer Apr 11 08:16:32 >> 2023 GMT >> /etc/pki/ovirt-engine/certs/ovn-sdb.cer Apr 11 08:16:32 >> 2023 GMT >> >> How can I renew these certficates? >> Thanks in advance, >> Regards >> Tibor >> _______________________________________________ >> Users mailing list -- users(a)ovirt.org >> To unsubscribe send an email to users-leave(a)ovirt.org >> Privacy Statement: https://www.ovirt.org/privacy-policy.html >> oVirt Code of Conduct: >> https://www.ovirt.org/community/about/community-guidelines/ >> List Archives: >> https://lists.ovirt.org/archives/list/users@ovirt.org/message/VH7LJ3UXPKY... >> >> _______________________________________________ >> Users mailing list -- users(a)ovirt.org >> To unsubscribe send an email to users-leave(a)ovirt.org >> Privacy Statement: https://www.ovirt.org/privacy-policy.html >> oVirt Code of Conduct: >> https://www.ovirt.org/community/about/community-guidelines/ >> List Archives: >> https://lists.ovirt.org/archives/list/users@ovirt.org/message/3JIJ2P5SUNQ... > >

Maybe you don't use ovirt-ovn. Also, we don't use it either. You can check these certs too: /etc/pki/ovirt-engine/certs/ovn-ndb.cer /etc/pki/ovirt-engine/certs/ovn-sdb.cer Tibor ------------------------------ *Feladó: *carl <crl.langlois(a)gmail.com&gt; *Címzett: *Demeter <tdemeter(a)itsmart.hu&gt; *Másolat: *Darrell <budic(a)onholyground.com>; users <users(a)ovirt.org&gt; *Dátum: *2023. március 10., péntek 14:46 CET *Tantárgy: *Re: [ovirt-users] Re: renew certificates Yes: ticket was good till Dec 23 2022 and last system boot 2022-12-31 Regards Carl On Fri, Mar 10, 2023 at 8:39 AM Demeter Tibor <tdemeter(a)itsmart.hu&gt; wrote: > Dear Carl, > > I don't know but I don't wanna try what will happen if it sets to > expire... > > Have you restart the ovirt-engine since that is expired? > Thanks > > Tibor > > > > > ------------------------------ > *Feladó: *carl <crl.langlois(a)gmail.com&gt; > *Címzett: *Demeter <tdemeter(a)itsmart.hu&gt; > *Másolat: *Darrell <budic(a)onholyground.com>; users <users(a)ovirt.org&gt; > *Dátum: *2023. március 10., péntek 14:32 CET > *Tantárgy: *Re: [ovirt-users] Re: renew certificates > > Hi Tibor, > > You are right. This certificate expired last December and was not > renewed. Why am I not seeing any issue? > > Regards > Carl > > On Fri, Mar 10, 2023 at 8:16 AM Demeter Tibor <tdemeter(a)itsmart.hu&gt; > wrote: > >> Dear Carl, >> >> Yes, I did exactly same with our 4.3 system at last summer. But it >> didn't renew all of certificates. >> >> You can check it with this command: >> >> openssl x509 -in /etc/pki/ovirt-engine/certs/ovirt-provider-ovn.cer >> -noout -dates >> >> Thank you. >> >> Regards >> Tibor >> >> >> >> >> ------------------------------ >> *Feladó: *carl <crl.langlois(a)gmail.com&gt; >> *Címzett: *Demeter <tdemeter(a)itsmart.hu&gt; >> *Másolat: *Darrell <budic(a)onholyground.com>; users <users(a)ovirt.org&gt; >> *Dátum: *2023. március 10., péntek 12:48 CET >> *Tantárgy: *Re: [ovirt-users] Re: renew certificates >> >> Hi, >> >> I remember having certificats expired back in décembre. I am still on >> 4.3 and engine-setup did renew the certificat. So not sure why it is not >> doing it on your side. >> >> Regards >> Carl >> >> Le ven. 10 mars 2023, 04 h 04, Demeter Tibor <tdemeter(a)itsmart.hu&gt; a >> écrit : >> >>> Dear Darell, >>> >>> Thank you for your reply. >>> That solution is not working on 4.3, because engine-setup does not >>> renew these certs. It was a bug and it was resolved in 4.5.2. >>> Any other suggestion? >>> Thanks >>> Regards >>> Tibor >>> >>> >>> >>> >>> ------------------------------ >>> *Feladó: *Darrell <budic(a)onholyground.com&gt; >>> *Címzett: *Demeter <tdemeter(a)itsmart.hu&gt; >>> *Másolat: *users <users(a)ovirt.org&gt; >>> *Dátum: *2023. március 9., csütörtök 17:44 CET >>> *Tantárgy: *Re: [ovirt-users] renew certificates >>> >>> Run engine-setup on your engine, it should ask to renew the cert and CA >>> for you. >>> >>> -Darrell >>> >>> On Mar 9, 2023, at 6:19 AM, Demeter Tibor <tdemeter(a)itsmart.hu&gt; wrote: >>> Dear listmembers, >>> >>> We have an ovirt 4.3 hyperconverged system and couple certificates will >>> expire in next month. >>> >>> /etc/pki/ovirt-engine/certs/ovirt-provider-ovn Apr 11 08:16:33 >>> 2023 GMT >>> /etc/pki/ovirt-engine/certs/ovn-ndb.cer Apr 11 >>> 08:16:32 2023 GMT >>> /etc/pki/ovirt-engine/certs/ovn-sdb.cer Apr 11 >>> 08:16:32 2023 GMT >>> >>> How can I renew these certficates? >>> Thanks in advance, >>> Regards >>> Tibor >>> _______________________________________________ >>> Users mailing list -- users(a)ovirt.org >>> To unsubscribe send an email to users-leave(a)ovirt.org >>> Privacy Statement: https://www.ovirt.org/privacy-policy.html >>> oVirt Code of Conduct: >>> https://www.ovirt.org/community/about/community-guidelines/ >>> List Archives: >>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/VH7LJ3UXPKY... >>> >>> _______________________________________________ >>> Users mailing list -- users(a)ovirt.org >>> To unsubscribe send an email to users-leave(a)ovirt.org >>> Privacy Statement: https://www.ovirt.org/privacy-policy.html >>> oVirt Code of Conduct: >>> https://www.ovirt.org/community/about/community-guidelines/ >>> List Archives: >>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/3JIJ2P5SUNQ... >> >>