Commit 109e376 Implications

[kawreh]

Re: ️ XO 6: dedicated thread for all your feedback!

Read through OpenSSL3 support commit text. Didn't quite understand the implications:
When will a recompile (update) of XO from sources, implementing this commit, need new certs? Any risk of loosing "Intra-Pool" communications without generating new certs before implementing commit?

[rzr]

Hi @kawreh

Thank you for looking at my commit:
https://github.com/vatesfr/xen-orchestra/pull/9507

If you are using sdn-controller, yes you will have to regenerate certificates (for XCP-ng on openssl-3), we are currently drafting a procedure to make it the easiest possible.

rzr opened this pull request in vatesfr/xen-orchestra

closed fix(sdn-controller): Support openssl-3 for ca/cert generation #9507

[rzr]

said in Commit 109e376 Implications:

we are currently drafting a procedure to make it the easiest possible.

FYI: https://github.com/vatesfr/xen-orchestra/pull/9525

More details to come in upcoming weekS

thomas-dkmt opened this pull request in vatesfr/xen-orchestra

closed docs(sdn_controller.md): document openssl 3 + sdn upgrade path #9525

[rzr]

Instruction published:

https://docs.xen-orchestra.com/sdn_controller#openssl-3--sdn-upgrade-path

Any volunteer to test this along upcoming XCP-ng update ?

[rzr]

Latest XO can be new tested along XCP-ng (with OpenSSL 3):

https://xcp-ng.org/forum/topic/9964/xcp-ng-8-3-updates-announcements-and-testing/363

Feedback welcome