No, that's cluster infrastructure certificates.

It sounds like the new cert isn't being written out on disk inside the
router pod.  You can try `oc rsh router-XXXX` and then see if you can find
your cert on disk.  You may also want to check the router logs - if your
cert is invalid, the router may be ignoring the updated version.

On Tue, Nov 22, 2016 at 10:33 AM, Dean Peterson <[email protected]>
wrote:

> Is this relevant? https://docs.openshift.org/latest/install_
> config/redeploying_certificates.html
>
> On Tue, Nov 22, 2016 at 9:16 AM, Dean Peterson <[email protected]>
> wrote:
>
>> I deleted the route many times. The odd thing is it still serves up the
>> same cert with the route deleted. With the route deleted, it shows a 503 no
>> service error but the address is still secured with the same certificate.
>> When I recreate the route I hit the app again and the cert is again still
>> the same.
>>
>> On Nov 22, 2016 9:04 AM, "Clayton Coleman" <[email protected]> wrote:
>>
>>> If you verify it is your cert you are getting, delete and recreate the
>>> route to double check that it's being updated properly.  If that fixes it
>>> please file a bug about route certificates not updating.
>>>
>>> On Nov 22, 2016, at 2:31 AM, Dean Peterson <[email protected]>
>>> wrote:
>>>
>>> Is the built in HA Proxy caching the information? How do I clear the
>>> HAProxy cache in Openshift?
>>>
>>> On Tue, Nov 22, 2016 at 1:10 AM, Dean Peterson <[email protected]>
>>> wrote:
>>>
>>>> How is this happening? I even removed the route entirely; it still
>>>> shows the same certificate information even when showing a 503 error after
>>>> the route is removed. The TLS information is only on the route. Is the
>>>> router or Openshift caching the information somewhere? I have restarted
>>>> Docker and the Openshift master and Node.
>>>>
>>>> On Mon, Nov 21, 2016 at 11:05 AM, Dean Peterson <
>>>> [email protected]> wrote:
>>>>
>>>>> Hello,
>>>>>
>>>>> I have a route with TLS enabled. The RSA key, certificate and CA
>>>>> bundle are all encoded in the route. I have an expiring TLS certificate. I
>>>>> renewed and replaced the values of the certificate and CA bundle, removed
>>>>> and updated the route. Unfortunately, the browser still shows the same
>>>>> expiration date for the certificate. Does openshift cache TLS information;
>>>>> do I need to do something other than deleting the route and recreating it
>>>>> with the new values?
>>>>>
>>>>
>>>>
>>> _______________________________________________
>>> users mailing list
>>> [email protected]
>>> http://lists.openshift.redhat.com/openshiftmm/listinfo/users
>>>
>>>
>
_______________________________________________
users mailing list
[email protected]
http://lists.openshift.redhat.com/openshiftmm/listinfo/users

Reply via email to