Bug 1443225 - Docs: Add step to update /etc/pki/ovirt-engine/ca.pem file in RHV 4 Administration Guide under "Appendix D. Red Hat Virtualization and SSL"
Summary: Docs: Add step to update /etc/pki/ovirt-engine/ca.pem file in RHV 4 Administ...
Keywords:
Status: CLOSED DUPLICATE of bug 1416232
Alias: None
Product: Red Hat Enterprise Virtualization Manager
Classification: Red Hat
Component: Documentation
Version: 4.0.0
Hardware: All
OS: Linux
unspecified
low
Target Milestone: ---
: ---
Assignee: rhev-docs@redhat.com
QA Contact: rhev-docs@redhat.com
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2017-04-18 19:24 UTC by Pawan kumar Vilayatkar
Modified: 2023-09-14 03:56 UTC (History)
7 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2017-04-24 08:24:14 UTC
oVirt Team: Docs
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)

Description Pawan kumar Vilayatkar 2017-04-18 19:24:42 UTC
The RHV 4.x Administration Guide does not include step to update /etc/pki/ovirt-engine/ca.pem when using self signed certificate under "Appendix D. Red Hat Virtualization and SSL". 

Below are steps to include :

# cd /etc/pki/ovirt-engine
# openssl x509 -in /tmp/<selfed_signed_certifcate> -text -noout > ca.pem
# cat apache-ca.pem >> ca.pem

systemctl restart httpd.service
systemctl restart ovirt-engine.service

Comment 1 Yaniv Kaul 2017-04-19 08:13:30 UTC
Would be good to change the title from 'SSL' to 'SSL/TLS'.

Comment 2 Lucy Bopf 2017-04-24 08:24:14 UTC
Tracking all SSL certificate procedure feedback in bug 1416232. This feedback will be used in that bug.

*** This bug has been marked as a duplicate of bug 1416232 ***

Comment 3 Yedidyah Bar David 2017-07-13 10:38:24 UTC
(In reply to Pawan kumar Vilayatkar from comment #0)
> The RHV 4.x Administration Guide does not include step to update
> /etc/pki/ovirt-engine/ca.pem when using self signed certificate

Can you please explain why you need this step? Thanks.

AFAIU ca.crt should include only the ca-cert of the engine-internal CA and nothing else.

> under
> "Appendix D. Red Hat Virtualization and SSL". 
> 
> Below are steps to include :
> 
> # cd /etc/pki/ovirt-engine
> # openssl x509 -in /tmp/<selfed_signed_certifcate> -text -noout > ca.pem
> # cat apache-ca.pem >> ca.pem
> 
> systemctl restart httpd.service
> systemctl restart ovirt-engine.service

Comment 4 Yedidyah Bar David 2017-07-13 10:45:44 UTC
(In reply to Yedidyah Bar David from comment #3)
> (In reply to Pawan kumar Vilayatkar from comment #0)
> > The RHV 4.x Administration Guide does not include step to update
> > /etc/pki/ovirt-engine/ca.pem when using self signed certificate
> 
> Can you please explain why you need this step? Thanks.

Perhaps related to bug 1146710.

Comment 6 Red Hat Bugzilla 2023-09-14 03:56:35 UTC
The needinfo request[s] on this closed bug have been removed as they have been unresolved for 1000 days


Note You need to log in before you can comment on or make changes to this bug.