IIRC, the certificate and key are only read from their files when the
commands to specify the file are executed. At that point they are stored
somewhere else. Try executing the two commands (one for key, one for
cert) again, then restart (disable/enable might be enough, I can't
remember).
Regards, Chris
On 19/12/2024 07:04, duluxoz wrote:
Hi All,
So we've been using the Ceph (v18.2.4) Dashboard with internally
generated TLS Certificates (via our Step-CA CA), one for each of our
three Ceph Manager Nodes.
Everything was working AOK.
The TLS Certificates came up for renewal, which they were successfully
renewed. Accordingly, the old Certificates & Keys were overwritten by
the new ones and the commands `ceph mgr module disable/enabled
dashboard` (respectively) were run.
HOWEVER, the Ceph Dashboard stopped working / wouldn't use the renewed
Certificates; as per the logs the Dashboard was still using the old
Certificates and is now complaining that they have expired, and
therefore the Dashboard won't run (unless I disable SSL via the CLI).
I've been through the documentation and I can't work out what I've
done wrong; according to this page
(https://docs.ceph.com/en/latest/mgr/dashboard/#dashboard-ssl-tls-support)
- in particular the Blue-Box Note - there's nothing else that needs to
be done - EXCEPT that I've done all of that and the logs still tell me
the Certificate(s) has expired - ie I can't get the Dashboard to
recognise the new Certificates.
Any help greatly appreciated.
Thanks in advance
Dulux-Oz
_______________________________________________
ceph-users mailing list -- ceph-users@xxxxxxx
To unsubscribe send an email to ceph-users-leave@xxxxxxx
_______________________________________________
ceph-users mailing list -- ceph-users@xxxxxxx
To unsubscribe send an email to ceph-users-leave@xxxxxxx
