Hi,

Did you notice you are testing the cockpit certificate, not any oVirt related 
certificate?

Any procedure to renew oVirt certificates will not touch the cockpit 
self-signed certificates.

By default, the cockpit ssl certificate is automatically renewed before 
expiring and don't need to worry about it.

Anyway, you can generate it manually using the 
/usr/libexec/cockpit-certificate-helper script.

Marcos

-----Original Message-----
From: Денис Панкратьев <pankrat...@gmail.com> 
Sent: Wednesday, December 4, 2024 7:43 AM
To: users@ovirt.org
Subject: [External] : [ovirt-users] Enroll Certificate

Hello!

My ovirt host (4.5.5) certificate is about to expire (in 46 days, Jan 20, 2025).

d.pankratiev@zabbix ~]$ echo | openssl s_client -servername ovirt1.gtc.local 
-connect XXX.XXX.XXX.XXX.XXX:9090 2>/dev/null | openssl x509 -noout -dates 
2>/dev/null notBefore=Dec 22 05:27:04 2023 GMT notAfter=Jan 20 05:27:04 2025 GMT

1. I have migrated all VMs to another host 2. I put the host in maintenance 
mode (Managеment -> Maintenance) 3. Do enroll certificate (Installation -> 
Enroll Certificate) 4. Everything went successfully, without errors (Enrolling 
certificate for host ovirt1.gtc.local was completed successfully).

But the certificate date did not change, still expire (after 46 days, Jan 20 
2025).
d.pankratiev@zabbix ~]$ echo | openssl s_client -servername ovirt1.gtc.local 
-connect XXX.XXX.XXX.XXX.XXX:9090 2>/dev/null | openssl x509 -noout -dates 
2>/dev/null notBefore=Dec 22 05:27:04 2023 GMT notAfter=Jan 20 05:27:04 2025 GMT

What did I do wrong? Is there anything else I need to do?
_______________________________________________
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: 
https://urldefense.com/v3/__https://www.ovirt.org/privacy-policy.html__;!!ACWV5N9M2RV99hQ!NPp4FoVrait2l_gLS9c75rTNqTxIJmT5bQH0k2oV40jcoAIiJrrDX3VMTDeiFWHMV3vKFR1UT5G2ql3UpgzM904$
oVirt Code of Conduct: 
https://urldefense.com/v3/__https://www.ovirt.org/community/about/community-guidelines/__;!!ACWV5N9M2RV99hQ!NPp4FoVrait2l_gLS9c75rTNqTxIJmT5bQH0k2oV40jcoAIiJrrDX3VMTDeiFWHMV3vKFR1UT5G2ql3UX18YAIo$
List Archives: 
https://urldefense.com/v3/__https://lists.ovirt.org/archives/list/users@ovirt.org/message/DJWGURXYRWCK55RX7Q6CYGVXFGT4LHOP/__;!!ACWV5N9M2RV99hQ!NPp4FoVrait2l_gLS9c75rTNqTxIJmT5bQH0k2oV40jcoAIiJrrDX3VMTDeiFWHMV3vKFR1UT5G2ql3UXWkhoXc$
 
_______________________________________________
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/UOEIUHQGMXHDSBCGF5EHGGOUUDLN4TGA/

Reply via email to