cloudstack-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From GitBox <...@apache.org>
Subject [GitHub] rhtyd commented on issue #2930: HA for Management Server - roundrobin: Certificate ownership
Date Mon, 12 Nov 2018 11:03:21 GMT
rhtyd commented on issue #2930: HA for Management Server - roundrobin: Certificate ownership
URL: https://github.com/apache/cloudstack/issues/2930#issuecomment-437840211
 
 
   @DennisKonrad can you at least stop all your mgmt servers and start one by one? It's possible
that you had a conflict b/w root ca cert/priv/pub keys, you can temporarily disable auth strictness,
then remove the global settings and use provisionCertificate API to re-provision certificate
with a new keypair/cert. You're currently using a messed up (sounds like) unstable/master
branch and we cannot help once you fix your env. Also, please re-read my comments I'm not
going to restate the same things again and again. About IPs, mgmt server when it starts discovers
the IPs it needs to use to create a self-signed cert, and NO you don't need to delete the
certs/keypair every time you add a new mgmt server. I advised that because you may have a
case where you started multiple mgmt server during time of install/setup at once which stepped
on each other and wrote incorrect ca keypair/cert in db (i.e. conflict+concurrent issue).

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
users@infra.apache.org


With regards,
Apache Git Services

Mime
View raw message