GitHub user SviridoffA added a comment to the discussion: Need help with VM console
Guys, thank you all for your help! This is not a simple task (for me:) ) to figure out which certificate QEMU process is running with, and I decided not to bother with this task. All other indirect factors indicate that @weizhouapache is right, and it's also reliably known about the issue of launching virtual machines with an outdated certificate when the VMs were started before the certificate renewal. I think we can close this discussion. My current certificates: ``` root@node2:~# openssl x509 -in /etc/cloudstack/agent/cloud.crt -noout -dates notBefore=Sep 28 23:35:22 2025 GMT notAfter=Sep 29 11:35:22 2026 GMT root@node2:~# openssl x509 -in /etc/pki/libvirt/servercert.pem -noout -dates notBefore=Sep 28 23:35:22 2025 GMT notAfter=Sep 29 11:35:22 2026 GMT ``` As far as I understand, if auto-renewal is enabled, the certificates will be regenerated 15 days before expiration. In that case, everything adds up. I set the CA framework cert validity period to 3650 days, so next year I will encounter this issue again, after which certificates with a 10-year term will be issued. GitHub link: https://github.com/apache/cloudstack/discussions/11866#discussioncomment-14738301 ---- This is an automatically sent email for [email protected]. To unsubscribe, please send an email to: [email protected]
