[ovirt-users] Ovirt-engine certificate SHA256

[Alon Bar-Lev]

----- Original Message -----
> From: "Kevin C" <kiven at kiven.fr>
> To: users at ovirt.org
> Sent: Friday, June 12, 2015 5:19:37 PM
> Subject: [ovirt-users] Ovirt-engine certificate SHA256
> 
> Hi list,
> 
> Is it possible to renew the ovirt-engine certificate to generate a new one
> with
> SHA256 .
> 

Never tried that, and as the certificate should not be exposed, it should not be very important.

However, you should be able to update /etc/pki/ovirt-engine/openssl.conf before installation and modify:

-default_md = sha1
+default_md = sha256

I am unsure how python (vdsm) will digest that.

Regards,
Alon