{"id":839,"date":"2022-06-15T09:58:21","date_gmt":"2022-06-15T07:58:21","guid":{"rendered":"https:\/\/www.ume.li\/blog\/?p=839"},"modified":"2022-10-25T13:55:01","modified_gmt":"2022-10-25T11:55:01","slug":"hcl-component-pack-certificates","status":"publish","type":"post","link":"https:\/\/www.ume.li\/blog\/2022\/06\/15\/hcl-component-pack-certificates\/","title":{"rendered":"HCL Component Pack &#8211; Certificates"},"content":{"rendered":"<p>The default certificates for the Component Pack are valid for 2 years.<br \/>\nFor example:<\/p>\n<pre class=\"brush: plain; title: ; notranslate\" title=\"\">\r\nkubectl -n connections view-secret mongo-secret user_app-registry.pem | openssl x509 -noout -text\r\n<\/pre>\n<p><a href=\"https:\/\/www.ume.li\/blog\/2022\/06\/15\/hcl-component-pack-certificates\/selection_086\/\" rel=\"attachment wp-att-840\"><img decoding=\"async\" class=\"alignleft size-medium wp-image-840\" src=\"https:\/\/www.ume.li\/blog\/wp-content\/uploads\/2022\/06\/Selection_086-300x54.png\" alt=\"\" width=\"100%\" height=\"108\" srcset=\"https:\/\/www.ume.li\/blog\/wp-content\/uploads\/2022\/06\/Selection_086-300x54.png 300w, https:\/\/www.ume.li\/blog\/wp-content\/uploads\/2022\/06\/Selection_086-1024x183.png 1024w, https:\/\/www.ume.li\/blog\/wp-content\/uploads\/2022\/06\/Selection_086-768x137.png 768w, https:\/\/www.ume.li\/blog\/wp-content\/uploads\/2022\/06\/Selection_086.png 1243w\" sizes=\"(max-width: 300px) 100vw, 300px\" \/><\/a><br \/>\nView-secret is an additional kubectl plugin. I use the <a title=\"https:\/\/krew.sigs.k8s.io\/\" href=\"https:\/\/krew.sigs.k8s.io\/\" target=\"_blank\" rel=\"noopener\">https:\/\/krew.sigs.k8s.io\/<\/a> plugin manager for easy install.<\/p>\n<p>Without the view-secret plugin the date can be extracted like this:<\/p>\n<pre class=\"brush: plain; title: ; notranslate\" title=\"\">\r\nkubectl get secret mongo-secret -n connections -o &quot;jsonpath={.data.user_app-registry\\.pem}&quot; | base64 -d | openssl x509 -noout -enddate\r\n<\/pre>\n<p>What could happen when these certificates expire ? Nothing &#8230; until the pods get restarted&#8230; and the pods may fail to connect&#8230;<\/p>\n<p>Fix:<br \/>\nUninstall the bootstrap helm chart.<\/p>\n<pre class=\"brush: plain; title: ; notranslate\" title=\"\">\r\nhelm -n connections uninstall bootstrap\r\n<\/pre>\n<p>Re-install the bootstrap helm chart again with the env.force_regenerate=true. see <a title=\"HCL Help\" href=\"https:\/\/help.hcltechsw.com\/connections\/v7\/admin\/install\/cp_install_bootstrap.html?hl=force_regenerate\" target=\"_blank\" rel=\"noopener\">HCL Help<\/a><\/p>\n<p>For Component Pack 7 just add the value to the your YML file used during initial installation.<\/p>\n<p><a href=\"https:\/\/www.ume.li\/blog\/2022\/06\/15\/hcl-component-pack-certificates\/selection_087\/\" rel=\"attachment wp-att-851\"><img loading=\"lazy\" decoding=\"async\" class=\"alignleft size-medium wp-image-851\" src=\"https:\/\/www.ume.li\/blog\/wp-content\/uploads\/2022\/06\/Selection_087-300x55.png\" alt=\"\" width=\"300\" height=\"55\" srcset=\"https:\/\/www.ume.li\/blog\/wp-content\/uploads\/2022\/06\/Selection_087-300x55.png 300w, https:\/\/www.ume.li\/blog\/wp-content\/uploads\/2022\/06\/Selection_087.png 467w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p>Verify that the certificates are upated and restart the Component Pack.<br \/>\nIf you are using metrics or elasticsearch you need clean up the ES- SSL settings and run the enableSslForMetrics and enableSslForESSearch commands again.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The default certificates for the Component Pack are valid for 2 years. For example: kubectl -n connections view-secret mongo-secret user_app-registry.pem<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[54,23],"tags":[74,67,24,75,79],"class_list":["post-839","post","type-post","status-publish","format-standard","hentry","category-component-pack","category-connections","tag-certificate","tag-component-pack","tag-connections","tag-expire","tag-ssl"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/www.ume.li\/blog\/wp-json\/wp\/v2\/posts\/839","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ume.li\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.ume.li\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.ume.li\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ume.li\/blog\/wp-json\/wp\/v2\/comments?post=839"}],"version-history":[{"count":19,"href":"https:\/\/www.ume.li\/blog\/wp-json\/wp\/v2\/posts\/839\/revisions"}],"predecessor-version":[{"id":872,"href":"https:\/\/www.ume.li\/blog\/wp-json\/wp\/v2\/posts\/839\/revisions\/872"}],"wp:attachment":[{"href":"https:\/\/www.ume.li\/blog\/wp-json\/wp\/v2\/media?parent=839"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ume.li\/blog\/wp-json\/wp\/v2\/categories?post=839"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ume.li\/blog\/wp-json\/wp\/v2\/tags?post=839"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}