Rinnovo certificati Proxmox - Revision history

Gabriele.vivinetto at 09:03, 5 December 2022

2022-12-05T09:03:53Z

← Older revision		Revision as of 09:03, 5 December 2022
Line 16:		Line 16:
	openssl req -x509 -new -nodes -key ca.key -sha256 -days 3650 -out ca.pem		openssl req -x509 -new -nodes -key ca.key -sha256 -days 3650 -out ca.pem

	* Mettere nome cert server		* Mettere nome cert server (la scadenza deve essere per forza inferiore a due anni)

	openssl genrsa -out server.key 2048		openssl genrsa -out server.key 2048
	openssl req -new -key server.key -out server.csr		openssl req -new -key server.key -out server.csr
	openssl x509 -req -in server.csr -CA ca.pem -CAkey ca.key -CAcreateserial -out server.pem -days ~~3650~~ -sha256		openssl x509 -req -in server.csr -CA ca.pem -CAkey ca.key -CAcreateserial -out server.pem -days 728 -sha256

	mv -f ca.pem pve-root-ca.pem		mv -f ca.pem pve-root-ca.pem

Gabriele.vivinetto at 14:47, 3 December 2022

2022-12-03T14:47:24Z

← Older revision		Revision as of 14:47, 3 December 2022
Line 2:		Line 2:
	Failed to start VNC server: The CA certificate /etc/pve/pve-root-ca.pem has expired		Failed to start VNC server: The CA certificate /etc/pve/pve-root-ca.pem has expired

	* Sul primo nodo del cluster		=Sul primo nodo del cluster=

	/bin/cp -f /etc/pve/pve-root-ca.pem /etc/pve/pve-root-ca.pem.old		/bin/cp -f /etc/pve/pve-root-ca.pem /etc/pve/pve-root-ca.pem.old
Line 33:		Line 33:
	* Accedere ora via web		* Accedere ora via web

	* Sugli altri nodi:		=Sugli altri nodi=

	cd /etc/pve		cd /etc/pve
Line 42:		Line 42:
	openssl req -new -key server.key -out server.csr		openssl req -new -key server.key -out server.csr
	openssl x509 -req -in server.csr -CA pve-root-ca.pem -CAkey ca.key -CAcreateserial -out server.pem -days 3650 -sha256		openssl x509 -req -in server.csr -CA pve-root-ca.pem -CAkey ca.key -CAcreateserial -out server.pem -days 3650 -sha256

			mv -f server.key pve-ssl.key
			mv -f server.pem pve-ssl.pem

	/bin/cp -f pve-ssl.key /etc/pve/local/pve-ssl.key		/bin/cp -f pve-ssl.key /etc/pve/local/pve-ssl.key

Gabriele.vivinetto at 09:29, 2 December 2022

2022-12-02T09:29:19Z

← Older revision		Revision as of 09:29, 2 December 2022
Line 4:		Line 4:
	* Sul primo nodo del cluster		* Sul primo nodo del cluster

	cp /etc/pve/pve-root-ca.pem /etc/pve/pve-root-ca.pem.old		/bin/cp -f /etc/pve/pve-root-ca.pem /etc/pve/pve-root-ca.pem.old
	cp /etc/pve/local/pve-ssl.key /etc/pve/local/pve-ssl.key.old		/bin/cp -f /etc/pve/local/pve-ssl.key /etc/pve/local/pve-ssl.key.old
	cp /etc/pve/local/pve-ssl.pem /etc/pve/local/pve-ssl.pem.old		/bin/cp -f /etc/pve/local/pve-ssl.pem /etc/pve/local/pve-ssl.pem.old

Gabriele.vivinetto: Created page with "Se non si riesce ad accedere, o non si visualizzano console, o non si resce a far partire VM per errori di certificato tipo: Failed to start VNC server: The CA certificate /e..."

2021-03-26T13:20:17Z

Created page with "Se non si riesce ad accedere, o non si visualizzano console, o non si resce a far partire VM per errori di certificato tipo: Failed to start VNC server: The CA certificate /e..."

New page

Se non si riesce ad accedere, o non si visualizzano console, o non si resce a far partire VM per errori di certificato tipo:
Failed to start VNC server: The CA certificate /etc/pve/pve-root-ca.pem has expired

* Sul primo nodo del cluster

cp /etc/pve/pve-root-ca.pem /etc/pve/pve-root-ca.pem.old
cp /etc/pve/local/pve-ssl.key /etc/pve/local/pve-ssl.key.old
cp /etc/pve/local/pve-ssl.pem /etc/pve/local/pve-ssl.pem.old

* Mettere dati CA

cd /etc/pve

openssl genrsa -out ca.key 2048
openssl req -x509 -new -nodes -key ca.key -sha256 -days 3650 -out ca.pem

* Mettere nome cert server

openssl genrsa -out server.key 2048
openssl req -new -key server.key -out server.csr
openssl x509 -req -in server.csr -CA ca.pem -CAkey ca.key -CAcreateserial -out server.pem -days 3650 -sha256

mv -f ca.pem pve-root-ca.pem
mv -f server.key pve-ssl.key
mv -f server.pem pve-ssl.pem

/bin/cp -f pve-root-ca.pem /etc/pve/pve-root-ca.pem
/bin/cp -f pve-ssl.key /etc/pve/local/pve-ssl.key
/bin/cp -f pve-ssl.pem /etc/pve/local/pve-ssl.pem

* Accedere ora via web

* Sugli altri nodi:

cd /etc/pve

* Mettere nome cert server

openssl genrsa -out server.key 2048
openssl req -new -key server.key -out server.csr
openssl x509 -req -in server.csr -CA pve-root-ca.pem -CAkey ca.key -CAcreateserial -out server.pem -days 3650 -sha256

/bin/cp -f pve-ssl.key /etc/pve/local/pve-ssl.key
/bin/cp -f pve-ssl.pem /etc/pve/local/pve-ssl.pem

service pveproxy restart
service pvedaemon restart

* Accedere ora via web

=Riferimenti=
*[https://pve.proxmox.com/wiki/Proxmox_SSL_Error_Fixing Proxmox SSL Error Fixing - Proxmox VE]