rohityadavcloud commented on issue #9718:
URL: https://github.com/apache/cloudstack/issues/9718#issuecomment-2478454546
Hi all, by default I think this should work. The
ca.framework.cert.automatic.renewal needs to be enabled (true), and there's
also ca.framework.cert.expiry.alert.period and
havengit closed issue #9718: VM console cannot access after VNC certificate
expired
URL: https://github.com/apache/cloudstack/issues/9718
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specif
havengit commented on issue #9718:
URL: https://github.com/apache/cloudstack/issues/9718#issuecomment-2370610757
Thanks ,weizhou and community , I have change **Ca framework cert validity
period** to a very long time . I won't run into this problem in the future.
--
This is an automated
weizhouapache commented on issue #9718:
URL: https://github.com/apache/cloudstack/issues/9718#issuecomment-2370584807
> Yes , the vnc tls were enabled in all host. It seems that the qemu process
that is running, does not recognize the certificate change and still uses the
old certificate. S
havengit commented on issue #9718:
URL: https://github.com/apache/cloudstack/issues/9718#issuecomment-2370459380
Yes , the vnc tls were enabled in all host. It seems that the qemu process
that is running, does not recognize the certificate change and still uses the
old certificate. Stop the
weizhouapache commented on issue #9718:
URL: https://github.com/apache/cloudstack/issues/9718#issuecomment-2370433665
this may be related to #7015
can you check if
- `vnc_tls` is set to 1 in /etc/libvirt/qemu.conf ?
- console works after live migration to another host ?
--
T
weizhouapache commented on issue #9718:
URL: https://github.com/apache/cloudstack/issues/9718#issuecomment-2367637128
> Yes , I have restarted cpvm and libvirt on host. I confirm that the
certificate has been successfully updated on the host. May be same bug in qemu.
After stop vm and start
weizhouapache commented on issue #9718:
URL: https://github.com/apache/cloudstack/issues/9718#issuecomment-2367473163
there are some global settings ("ca.framework.*"), including
- ca.framework.background.task.delay
- ca.framework.cert.automatic.renewal
- ca.framework.cert.expiry.ale
havengit opened a new issue, #9718:
URL: https://github.com/apache/cloudstack/issues/9718
# ISSUE TYPE
* Bug Report
# COMPONENT NAME
~~~
CPVM
~~~
# CLOUDSTACK VERSION
~~~
4.18
~~~
# CONFIGURATION
a