Translated message

A translation of this page exists in English.

RHOCP에서 만료된 기본 수신 인증서를 재배포/갱신하는 방법은 무엇입니까?

Solution In Progress - Updated -

Issue

  • 기본 수신 인증서가 만료될 때 알림이 없습니다.
  • 만료된 기본 수신 인증서를 갱신하거나 재생성하는 방법.
  • 기본 수신 인증서가 만료되어 OpenShift 4 웹 콘솔에 액세스할 수 없으며 NET::ERR_CERT_DATE_INVALID 오류가 표시됩니다.
  • authentication 클러스터 operator를 사용할 수 없으며 다음 이유와 메시지로 인해 성능이 저하되었습니다.

    OAuthServerRouteEndpointAccessibleController_EndpointUnavailable
    
    OAuthServerRouteEndpointAccessibleController_SyncError::RouterCertsDomainValidationController_SyncError::RouterCerts_InvalidServerCertRouterCerts
    
    OAuthServerRouteEndpointAccessibleControllerDegraded: Get "https://oauth-openshift.apps.example.com/healthz": x509: certificate has expired or is not yet valid:current time YYYY-MM-DDTHH:MM:SSZ is after YYYY-MM-DDTHH:MM:SSZ
    
    RouterCertsDegraded: secret/v4-0-config-system-router-certs.spec.data[apps.example.com] -n openshift-authentication: certificate could not validate route hostname oauth-openshift.apps.example.com: x509: certificate has expired or is not yet valid: current time YYYY-MM-DDTHH:MM:SSZ is after YYYY-MM-DDTHH:MM:SSZ
    
  • certificate has expired로 인해 oc CLI를 사용하여 로그인할 수 없습니다.

    $ oc login -u kubeadmin https://api.cluster.example.com:6443
    error: x509: certificate has expired or is not yet valid: current time YYYY-MM-DDTHH:MM:SSZ is after YYYY-MM-DDTHH:MM:SSZ
    

Environment

  • Red Hat OpenShift Container Platform (RHOCP)
    • 4
  • 기본 수신 인증서

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content