{"id":399,"date":"2015-10-06T12:18:31","date_gmt":"2015-10-06T17:18:31","guid":{"rendered":"https:\/\/www.soljerome.com\/blog\/?p=399"},"modified":"2015-10-06T12:19:48","modified_gmt":"2015-10-06T17:19:48","slug":"regenerate-citrix-xenserver-ssl-certificate","status":"publish","type":"post","link":"https:\/\/www.soljerome.com\/blog\/2015\/10\/06\/regenerate-citrix-xenserver-ssl-certificate\/","title":{"rendered":"Regenerate Citrix Xenserver SSL certificate"},"content":{"rendered":"<p>When using Citrix XenCenter 6.5, I was suddenly unable to connect to a XenServer instance running 6.2. The following was in the XenCenter Event log.<\/p>\n<pre>\r\nFailed to connect to foo.example.com\r\nThe request was aborted: Could not create SSL\/TLS secure channel.\r\n<\/pre>\n<p>This was not due solely to the version mismatch but, seemingly, to an update in XenCenter which forces stricter SSL checks. The only difference I found was that the XenServer instance I was unable to connect to had a cert containing an old IP address.<\/p>\n<p>The first thing I did was update the parameters used to generate the SSL certificate<\/p>\n<pre>\r\nvim \/opt\/xensource\/libexec\/generate_ssl_cert\r\n<\/pre>\n<p>Then I was able to simply regenerate the certificate using the new parameters (and giving the resulting certificate the new IP address)<\/p>\n<pre>\r\n\/opt\/xensource\/libexec\/generate_ssl_cert \/etc\/xensource\/xapi-ssl.pem $(hostname -f) && \/etc\/init.d\/xapi start\r\n<\/pre>\n<p>Once completed, I was able to connect successfully.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>When using Citrix XenCenter 6.5, I was suddenly unable to connect to a XenServer instance running 6.2. The following was in the XenCenter Event log. Failed to connect to foo.example.com The request was aborted: Could not create SSL\/TLS secure channel. This was not due solely to the version mismatch but, seemingly, to an update in <a href='https:\/\/www.soljerome.com\/blog\/2015\/10\/06\/regenerate-citrix-xenserver-ssl-certificate\/' class='excerpt-more'>[&#8230;]<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[3],"tags":[],"_links":{"self":[{"href":"https:\/\/www.soljerome.com\/blog\/wp-json\/wp\/v2\/posts\/399"}],"collection":[{"href":"https:\/\/www.soljerome.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.soljerome.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.soljerome.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.soljerome.com\/blog\/wp-json\/wp\/v2\/comments?post=399"}],"version-history":[{"count":4,"href":"https:\/\/www.soljerome.com\/blog\/wp-json\/wp\/v2\/posts\/399\/revisions"}],"predecessor-version":[{"id":403,"href":"https:\/\/www.soljerome.com\/blog\/wp-json\/wp\/v2\/posts\/399\/revisions\/403"}],"wp:attachment":[{"href":"https:\/\/www.soljerome.com\/blog\/wp-json\/wp\/v2\/media?parent=399"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.soljerome.com\/blog\/wp-json\/wp\/v2\/categories?post=399"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.soljerome.com\/blog\/wp-json\/wp\/v2\/tags?post=399"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}