As you know, there are many kinds of certificates in Ovirt, used for
communication, authentication and so on.

However, in practice, there is a security risk related to the above
certificates. 

 

That is, you need to generate a new certificate after the certificate
expires. Otherwise, a problem will occur. 

In addition, different certificates expire at different times, which brings
a lot of management trouble to users. 

Especially in the production system, a huge virtualization cluster may run
thousands of VMS. If a cluster certificate has a problem, the impact is very
serious.

 

So I felt there was an urgent need for a technical tool that could help
users quickly locate certificates, identify their expiration dates, and
rebuild them.

Even if there is no tool, there should be a way to solve the problems caused
by partial certificate expiration. I think it should include the following
points:

First, how to list the certificate in detail

Second, how to check the certificate expiration time

Third, how to rebuild the certificate

 

Does anyone else have this kind of confusion? What's a good solution?

 

Thanks.

_______________________________________________
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/3WFDWAZ2ZE6L44YAYXK7Q5NUNZSDR4AU/

Reply via email to