LXD certificate expiry issue

[John Meinel]

https://lists.linuxcontainers.org/pipermail/lxc-users/2016-June/011765.html

Yeah, we didn't expect anyone to run into such issues just yet as our
> certificates have a 10 years expiry.
>
> We did have old versions of LXD issue 1 year certificates very much at
> the beginning of the project but this was fixed over a year ago, so most
> installations will have a 10 years certificate.
>
> That was back last year in June. So its been fixed for several months now,
I'm guessing its just a case of a few early adopters hitting it.

John
=:->



On Mon, Feb 13, 2017 at 3:51 PM, Horacio Duran <horacio.duran at canonical.com>
wrote:

> Is there a but for this in lxd? I believe this is quite a papercut for
> most users of lxd in local machines.
>
> On Mon, Feb 13, 2017 at 4:48 AM, Menno Smits <menno.smits at canonical.com>
> wrote:
>
>> Today Juju bootstraps started failing for me with the following error:
>>
>> cmd supercommand.go:458 new environ: creating LXD client: Get
>> https://10.0.8.1:8443/1.0: x509: certificate has expired or is not yet
>> valid
>>
>> It took me a while to figure out what was happening but it turned out
>> that the LXD's server certificate had expired over the weekend (confirmed
>> by inspecting the certificate file with openssl). If you delete
>> /var/lib/lxd/server.{crt,key} and restart lxd it'll generate a new
>> certificate and key.
>>
>> I noticed that the newly generated certificate lasts for 10 years whereas
>> the last one was only valid for 1 year. I guess I started using LXD on this
>> machine 1 year ago.
>>
>> I hope this helps anyone else who runs into this.
>>
>> - Menno
>>
>> --
>> Juju-dev mailing list
>> Juju-dev at lists.ubuntu.com
>> Modify settings or unsubscribe at: https://lists.ubuntu.com/mailm
>> an/listinfo/juju-dev
>>
>>
>
> --
> Juju-dev mailing list
> Juju-dev at lists.ubuntu.com
> Modify settings or unsubscribe at: https://lists.ubuntu.com/
> mailman/listinfo/juju-dev
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ubuntu.com/archives/juju-dev/attachments/20170213/ddef3a61/attachment.html>