I did not but I finally found the issue, what a ride this was..
After updating keys/engine.p12 hosts finally showed up. While there are
probably more certs outdated and some parts not working now I can
finally do regular enrollments.
I was right all along, the auth cert was causing the problem, I just had
to find it. Unfortunately zero docs on engine.p12 so it was all
deduction and luck in the end.
On 10/03/2023 11:41, Patrick Chiang wrote:
Yes, that is the exact guide I followed.
I can now actually use vdsm-client on each host after cert swap
but ovirt-engine still can't establish connection.
I had to manually generate the apache certs to get into the UI
console at the beginning and that was successful.
Is there a specific cert that ovirt-engine uses for mTLS handshahe?
Did you also try these?
mgr cert expired https://access.redhat.com/solutions/4780411
host cert expired https://access.redhat.com/solutions/3532921
Another one for host cert expiration
manually connect to guest VM https://access.redhat.com/solutions/3830921
I refer to these to fix my certs. Not sure if you can find the useful
info you want?