Hello all,
today i got a new certificate for our internal domain based on RSA/4096
secp384r1. After inserting CRT and Key i got both "...updated" messages.
After checking the dashboard i got an empty page and this error:
health: HEALTH_ERR
Module 'dashboard' has failed: key type unsupported
So we tried to go back to the original state by removing CRT anf KEY but
without success. The new key seems to stuck into the config
[root@cephxxxx ~]# ceph config-key get mgr/dashboard/crt
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgIMB5tjLSz264Ic8zeHMA0GCSqGSIb3DQEBCwUAMEwxCzAJ
[...]
ItzkEzq4SZ6V1Jhuf4bFlOMBVAKgAwZ90gXlguoiFFQu5+NIqNljZ8Jz7d0jhH43
e3zhm5sn21+eIqRbiQ==
-----END CERTIFICATE-----
[root@cephxxxx ~]# ceph config-key get mgr/dashboard/key
*Error ENOENT: *
We tried to generate a self signed Cert but no luck. It looks like manger
stays in an intermediate state. The only way to get back the dashboard is
to disable SSL and use plain http.
Can somebody explain this behaviour? Maybe secp384r1 elliptic curves
aren't supported? How can we clean up SSL configuration?
Thanks,
Christoph Ackermann
Ps we checked some Information like
https://tracker.ceph.com/issues/57924#change-227744 and others but no
luck...
_______________________________________________
ceph-users mailing list -- ceph-users@xxxxxxx
To unsubscribe send an email to ceph-users-leave@xxxxxxx
