DeepSea generated certificates will by default expire after 2 years

This document (000019634) is provided subject to the disclaimer at the end of this document.

Environment

SUSE Enterprise Storage 5.5
SUSE Enterprise Storage 6

Situation

By default with DeepSea certificates are created with a lifespan of 2 years (730 days).

Resolution

Re-create the soon to be expired or expired certificates.

Cause

Certificates expire after a set amount of time.

Additional Information

The examples provided in the SES (SUSE Enterprise Storage) online Administration Guide for creating self signed certificates also use the example of 730 days (2 years) and has the following note:

"Increase or decrease the value 730 as needed. This is the number of days for which the certificate is valid."

To recreate self signed certificates, simply again follow the steps as described in the documentation.

To recreate the DeepSea default generated certificates take the following steps:

1. On the DeepSea node delete the "deepsea_*" files under "/etc/pki" and "/etc/ssl/deepsea/".
2. Re-run DeepSea stage 2 and 3:

salt-run state.orch ceph.stage.2
salt-run state.orch ceph.stage.3

Disclaimer

This Support Knowledgebase provides a valuable tool for SUSE customers and parties interested in our products and solutions to acquire information, ideas and learn from one another. Materials are provided for informational, personal or non-commercial use within your organization and are presented "AS IS" WITHOUT WARRANTY OF ANY KIND.