Bug 1660441 - rename breaks apache cert
Summary: rename breaks apache cert
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: ovirt-engine
Classification: oVirt
Component: Tools.Rename
Version: 4.2.3
Hardware: Unspecified
OS: Unspecified
high
high
Target Milestone: ovirt-4.3.0
: ---
Assignee: Yedidyah Bar David
QA Contact: Lucie Leistnerova
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2018-12-18 10:39 UTC by Yedidyah Bar David
Modified: 2019-02-13 07:43 UTC (History)
2 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2019-02-13 07:43:05 UTC
oVirt Team: Integration
Embargoed:
rule-engine: ovirt-4.3+
rule-engine: exception+


Attachments (Terms of Use)
ovirt-engine-setup-20181218111341-64oa3z.log (2.77 MB, text/plain)
2018-12-18 10:39 UTC, Yedidyah Bar David
no flags Details


Links
System ID Private Priority Status Summary Last Updated
oVirt gerrit 96945 0 master MERGED packaging: setup: rename: Set SubjectAltName in apache cert 2021-02-04 08:48:36 UTC

Description Yedidyah Bar David 2018-12-18 10:39:30 UTC
Created attachment 1515307 [details]
ovirt-engine-setup-20181218111341-64oa3z.log

Description of problem:

After ovirt-engine-rename, engine-setup says:

One or more of the certificates should be renewed, because
they expire soon, or include an invalid expiry date, or do not include
the subjectAltName extension, which can cause them to be rejected by
recent browsers and up to date hosts.

Version-Release number of selected component (if applicable):


How reproducible:
not sure, I think 100%

Steps to Reproduce:
not sure, probably:
1. setup
2. rename
3. setup

Actual results:
last one prompts as above

Expected results:
rename writes certs just as setup expects them to be

Additional info:

Comment 1 Lucie Leistnerova 2019-02-04 13:00:06 UTC
ovirt-engine-rename updated engine certificate and so engine-setup doesn't have any problem with it.
(I had to fix the script that it would not fail according to BZ 1672251)

verified in ovirt-engine-4.3.0-0.8.rc2.el7.noarch

Comment 2 Sandro Bonazzola 2019-02-13 07:43:05 UTC
This bugzilla is included in oVirt 4.3.0 release, published on February 4th 2019.

Since the problem described in this bug report should be
resolved in oVirt 4.3.0 release, it has been closed with a resolution of CURRENT RELEASE.

If the solution does not work for you, please open a new bug report.


Note You need to log in before you can comment on or make changes to this bug.