XenServer re-generates self-signed documents

XenServer re-generates self-signed documents

Due to time zone settings and other problems, the time of XenServer or other newly created servers may be advanced to another date, and the self-Signed server certificate will take effect in the future, as a result, the test cannot be performed now, and the certificate can only be issued again.

There are two components used in the XenServer certificate:
Xapissl: all external sdks and management tools must communicate with XS through this component.
Cimserver: This is the SCVMM Intergrate Suit component. SCVMM needs to communicate with XS through this component.

Therefore, we only need to regenerate the certificate and restart the two components.

Echo "Stopping services"
/Opt/openpegasus/bin/cimserver-s
/Etc/init. d/xapissl stop
Echo "Backup cert"
Cert = "/etc/xensource/xapi-ssl.pem"
Cert_backup = "$ {cert}. 'date-u + % Y % m % dT % TZ '"
Mv-f "$ {cert}" "$ {cert_backup }"
Echo "Regenerate self signed certificate"
/Opt/xensource/libexec/generate_ssl_cert "$ {cert}" 'hostname-F'
Echo "Starting services"
/Opt/opengegasus/bin/cimserver
/Etc/init. d/xapissl start

This article permanently updates the link address: