Skip to content

packaging: rename p12 files on major os upgrade - #1072

Closed
dupondje wants to merge 1 commit into
oVirt:masterfrom
dupondje:fix/upgrade_certs
Closed

packaging: rename p12 files on major os upgrade#1072
dupondje wants to merge 1 commit into
oVirt:masterfrom
dupondje:fix/upgrade_certs

Conversation

@dupondje

Copy link
Copy Markdown
Member

When restoring a backup from CentOS 8 onto a CentOS 9 system, the p12 files that were generated are invalid, because they use a legacy encryption on CentOS 9.

So we rename the files during a restore if the major version differs, this as the following engine-setup generates new ones anyway then.

Are you the owner of the code you are sending in, or do you have permission of the owner?

[y]

@dupondje dupondje changed the title packing: remove p12 files on major os upgrade packaging: remove p12 files on major os upgrade Sep 30, 2025
When restoring a backup from CentOS 8 onto a CentOS 9 system, the p12
files that were generated are invalid, because they use a legacy
encryption on CentOS 9.

So we rename the files during a restore if the major version differs,
this as the following engine-setup generates new ones anyway then.

Signed-off-by: Jean-Louis Dupond <jean-louis@dupond.be>
@dupondje dupondje changed the title packaging: remove p12 files on major os upgrade packaging: rename p12 files on major os upgrade Sep 30, 2025
@didib

didib commented Sep 30, 2025

Copy link
Copy Markdown
Contributor

I'd recommend (perhaps already done elsewhere, didn't check):

  • Check if it's mandatory. Isn't it possible to create on CS9, files that are compatible with CS10?
  • Notify the user, perhaps even prompt, explaining the consequences
  • Update also the backup part, and on CS9, if possible, check if the p12 files are problematic, and if so, notify the user that they'll need to be recreated

@dupondje

Copy link
Copy Markdown
Member Author

Superseded by #1090

@dupondje dupondje closed this Oct 29, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants