LXD certificate expiry issue

Horacio Duran horacio.duran at canonical.com
Mon Feb 13 11:51:13 UTC 2017


Is there a but for this in lxd? I believe this is quite a papercut for most
users of lxd in local machines.

On Mon, Feb 13, 2017 at 4:48 AM, Menno Smits <menno.smits at canonical.com>
wrote:

> Today Juju bootstraps started failing for me with the following error:
>
> cmd supercommand.go:458 new environ: creating LXD client: Get
> https://10.0.8.1:8443/1.0: x509: certificate has expired or is not yet
> valid
>
> It took me a while to figure out what was happening but it turned out that
> the LXD's server certificate had expired over the weekend (confirmed by
> inspecting the certificate file with openssl). If you delete
> /var/lib/lxd/server.{crt,key} and restart lxd it'll generate a new
> certificate and key.
>
> I noticed that the newly generated certificate lasts for 10 years whereas
> the last one was only valid for 1 year. I guess I started using LXD on this
> machine 1 year ago.
>
> I hope this helps anyone else who runs into this.
>
> - Menno
>
> --
> Juju-dev mailing list
> Juju-dev at lists.ubuntu.com
> Modify settings or unsubscribe at: https://lists.ubuntu.com/
> mailman/listinfo/juju-dev
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ubuntu.com/archives/juju-dev/attachments/20170213/7db0eb4b/attachment.html>


More information about the Juju-dev mailing list