i cannot access to ovirt-engine with this error"sun.security.validator.validatorexception: pkix path validation failed: java.security.cert.certpathvalidatorexception: timestamp check failed
hello everyone, I apologize for asking what is probably a very basic question. when i login to my ovirt-engine webpage, the page show "sun.security.validator.validatorexception: pkix path validation failed: java.security.cert.certpathvalidatorexception: timestamp check failed" does anyone face it before and how to solve it the site is normal before which error message is just show near a month Yours Sincerely, school it
On Tue, Sep 15, 2020 at 11:47 AM momokch--- via Users <users@ovirt.org> wrote:
hello everyone,
I apologize for asking what is probably a very basic question. when i login to my ovirt-engine webpage, the page show "sun.security.validator.validatorexception: pkix path validation failed: java.security.cert.certpathvalidatorexception: timestamp check failed" does anyone face it before and how to solve it
the site is normal before which error message is just show near a month
Did you change the httpd cert, or are you using the default one (created by engine-setup)? Did you check the certificates for validity/expiry? Searching the net for your error message finds many relevant cases/solutions/etc., e.g.: https://www.endpoint.com/blog/2017/10/04/pkix-path-validation-failed-debuggi... Adding Martin. Best regards, -- Didi
thanks for your suggestion, i was solve the problem by the following steps # cp -a /etc/pki/ovirt-engine "/etc/pki/ovirt-engine.$(date "+%Y%m%d")" # SUBJECT="$(openssl x509 -subject -noout -in /etc/pki/ovirt-engine/certs/apache.cer | sed 's/subject= //')" # /usr/share/ovirt-engine/bin/pki-enroll-pkcs12.sh --name=apache --password="@PASSWORD@" --subject="${SUBJECT}" # openssl pkcs12 -passin "pass:@PASSWORD@" -nokeys -in /etc/pki/ovirt-engine/keys/apache.p12 > /etc/pki/ovirt-engine/certs/apache.cer # openssl pkcs12 -passin "pass:@PASSWORD@" -nocerts -nodes -in /etc/pki/ovirt-engine/keys/apache.p12 > /etc/pki/ovirt-engine/keys/apache.key.nopass # chmod 0600 /etc/pki/ovirt-engine/keys/apache.key.nopass https://lists.ovirt.org/pipermail/users/2014-April/023402.html i hope can help anyone who face the same problem.
Is the engine and the Hypervisour in sync (ntp/chrony working and no drift)? Best Regards, Strahil Nikolov В вторник, 15 септември 2020 г., 11:46:44 Гринуич+3, momokch--- via Users <users@ovirt.org> написа: hello everyone, I apologize for asking what is probably a very basic question. when i login to my ovirt-engine webpage, the page show "sun.security.validator.validatorexception: pkix path validation failed: java.security.cert.certpathvalidatorexception: timestamp check failed" does anyone face it before and how to solve it the site is normal before which error message is just show near a month Yours Sincerely, school it _______________________________________________ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-leave@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives:
participants (3)
-
momokch＠yahoo.com.hk -
Strahil Nikolov -
Yedidyah Bar David