Problem solved on chat. Our last update doesn't like it at all when a certificate was manually removed from the system without letting XAPI know.
So we had to:
revert the update and restart the toolstack - XAPI works again touch /etc/stunnel/certs/sdn-controller-ca.pem to create back a dummy file for the missing cert, so that xe will accept to remove it from database (it fails if it can't find the file for which you're trying to remove the database entry 🙄) xe pool-certificate-uninstall name=sdn-controller-ca.pem update again perform the update of the rest of the pool hostsI added a comment in the issue related to the patches we included in this update to fix certificate fingerprints: https://github.com/xapi-project/xen-api/issues/5955