Return-Path: X-Original-To: apmail-cloudstack-users-archive@www.apache.org Delivered-To: apmail-cloudstack-users-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 7712E175AF for ; Tue, 7 Apr 2015 16:47:50 +0000 (UTC) Received: (qmail 60141 invoked by uid 500); 7 Apr 2015 16:47:49 -0000 Delivered-To: apmail-cloudstack-users-archive@cloudstack.apache.org Received: (qmail 60090 invoked by uid 500); 7 Apr 2015 16:47:49 -0000 Mailing-List: contact users-help@cloudstack.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: users@cloudstack.apache.org Delivered-To: mailing list users@cloudstack.apache.org Received: (qmail 60078 invoked by uid 99); 7 Apr 2015 16:47:49 -0000 Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 07 Apr 2015 16:47:49 +0000 X-ASF-Spam-Status: No, hits=1.5 required=5.0 tests=HTML_MESSAGE,RCVD_IN_DNSWL_LOW,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (nike.apache.org: domain of terbolous@gmail.com designates 209.85.212.173 as permitted sender) Received: from [209.85.212.173] (HELO mail-wi0-f173.google.com) (209.85.212.173) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 07 Apr 2015 16:47:24 +0000 Received: by wizk4 with SMTP id k4so24716454wiz.1 for ; Tue, 07 Apr 2015 09:46:38 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type; bh=B07CladibC5TYder5uP50GGUrfyGxUd6T90jjLmfWoI=; b=DrApAoycbAKNPao5xL8UCDB+PZhUq0BhhRiwLmFvhMTkNPCZGahT96IU1uY4/dkZNl bdDIBuTTEE6RYJVxwPuPPAwv4Q3+M92QVdaql/gGPVY788JxL227FSNoXxCYn0CcUdoQ UqscbQhNafnAeCrKasE2+myPQY1d4b9vX+AaFAebp6CvMMf9qtMnI/RE8j+JlUE3aDTx bPo0oLpuGEO6HYacEme22t6IkDe4QTIsf2zhYPpUVjy/BYpeiqwSmg+p4ZWday4M32E+ SO4p0swFqjFk6XS2E//CXk9B2CoYUa/PeKIwtH79CdX/at33WBorzmL164JPCh+arlLt Bpqg== MIME-Version: 1.0 X-Received: by 10.194.175.39 with SMTP id bx7mr42451908wjc.22.1428425197859; Tue, 07 Apr 2015 09:46:37 -0700 (PDT) Received: by 10.28.37.2 with HTTP; Tue, 7 Apr 2015 09:46:37 -0700 (PDT) In-Reply-To: References: Date: Tue, 7 Apr 2015 18:46:37 +0200 Message-ID: Subject: Re: {HELP-NEEDED] Replace Root CA etc, for CPVM and SSVM From: Erik Weber To: "users@cloudstack.apache.org" Content-Type: multipart/alternative; boundary=089e01493ada81b9950513252875 X-Virus-Checked: Checked by ClamAV on apache.org --089e01493ada81b9950513252875 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Nothing in the logs? I had an issue where the private key wasn't being encrypted and had to fix it by encrypting manually. But I also had could not decrypt exceptions in the logs. Erik Den tirsdag 7. april 2015 skrev Andrija Panic f=C3=B8lgende: > Hi guys, > > our SSL just expired, and I needed to upload new ROOT CA, Intemediata ROO= T > CA, and at the end SSL for sever and a private key. > > I uploaded new ROOT CA, and after CPVM rebooted, also uploaded Intermedia= te > ROOT CA, via API, with URL encoded stuff - checked in database all seems > OK. > > But after uploading new SSL and private key, destroyed CPVM and SSVM - my > Console Proxy shows *.realiphost.com as the domain for the SSL wjen I > access > > Any clues what I did wrong ? > Should I have somehow removed first old ROOT CA and old Intermediate CA, > and upload new ones ? > > Here is database content from cloud.keystore: > http://snag.gy/LMA4h.jpg > > This means that for some reason, original realiphost.com SSL is now used > inside CPVM... > > Any help greatly appreciated, since this is live system... > > Thanks, > > > > -- > > Andrija Pani=C4=87 > --089e01493ada81b9950513252875--