Hello Chris,
                       engine-setup should renew the certificates, the event 
notifier can send warnings about expired or expiring certificates.

Regards,
                 Paul S.
________________________________________
From: Chris Adams <[email protected]>
Sent: 02 October 2018 15:04
To: [email protected]
Subject: [ovirt-users] Bad libvirt-spice certificate - regenerate?

I have an oVirt 4.1 cluster that was initially installed with 3.5 in
2014.  The SSL certificates on the physical hosts in
/etc/pki/vdsm/libvirt-spice have a problem - the "not before" date is
invalid (it doesn't include a time zone), and so I can't connect to VM
consoles from a client with OpenSSL 1.1.0i (up to date Fedora 27).

How can I regenerate these certificates?

Also, I noticed they expire next year - is that expiration handled
automatically?

--
Chris Adams <[email protected]>
_______________________________________________
Users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/[email protected]/message/3EMV5VLZMMT7MGQKDZKYQUQXN3FARG4D/
To view the terms under which this email is distributed, please go to:-
http://disclaimer.leedsbeckett.ac.uk/disclaimer/disclaimer.html
_______________________________________________
Users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/[email protected]/message/F3X6D6ADJXOE4TSQATSGWL5C2HTIEJZH/

Reply via email to