Proxmox Notes

proxmox_notes.as

## INSTALL VALID SSL

(Helps fix VNC error with SSL) Err: Failed to start VNC server: Our own certificate /etc/pve/local/pve-ssl.pem failed validation against /etc/pve/pve-root-ca.pem: The certificate hasn't got a known issuer

# Must rm/mv existing SSL
/etc/pve/pve-root-ca.pem
/etc/pve/priv/pve-root-ca.key
/etc/pve/nodes/<node>/pve-ssl.pem
/etc/pve/nodes/<node>/pve-ssl.key 

# CP valid SSL
fullchain.pem /etc/pve/nodes/<node>/pveproxy-ssl.pem
private-key.pem /etc/pve/nodes/<node>/pveproxy-ssl.key

# At the end
pvecm updatecerts -f
systemctl restart pveproxy in all nodes



## Revert to default SSL Configuration

rm -rf /etc/pve/pve-root-ca.pem
rm -rf /etc/pve/priv/pve-root-ca.key
rm -rf /etc/pve/nodes/pve01/pve-ssl.pem
rm -rf /etc/pve/nodes/pve01/pve-ssl.key
rm /etc/pve/pve-root-ca.pem /etc/pve/priv/pve-root-ca.key

pvecm updatecerts -f
systemctl restart pveproxy