首先執行ovstop -c
ovc -kill
停止
然後
bash-2.05# ovcert -list
+---------------------------------------------------------+
| 密鑰庫內容 |
+---------------------------------------------------------+
| 證書: |
| 4e440328-10f0-7522-1dc9-e6a565ea3eb8 (*) |
+---------------------------------------------------------+
| 信任證書: |
| CA_4e440328-10f0-7522-1dc9-e6a565ea3eb8 |
+---------------------------------------------------------+
+---------------------------------------------------------+
| 密鑰庫內容 (OVRG: server) |
+---------------------------------------------------------+
| 證書: |
| 4e440328-10f0-7522-1dc9-e6a565ea3eb8 (*) |
+---------------------------------------------------------+
| 信任證書: |
| CA_4e440328-10f0-7522-1dc9-e6a565ea3eb8 (*) |
+---------------------------------------------------------+
bash-2.05# ovcert -remove 4e440328-10f0-7522-1dc9-e6a565ea3eb8
* 您真的希望刪除具有別名 '4e440328-10f0-7522-1dc9-e6a565ea3eb8' 的證書嗎(是(y)/否(n))? y
信息: 已成功刪除證書。
bash-2.05# ovcert -remove CA_4e440328-10f0-7522-1dc9-e6a565ea3eb8
* 您真的希望刪除具有別名 'CA_4e440328-10f0-7522-1dc9-e6a565ea3eb8' 的證書嗎(是(y)/否(n))? y
信息: 已成功刪除證書。
bash-2.05# ovcert -remove 4e440328-10f0-7522-1dc9-e6a565ea3eb8 -ovrg server
* 您真的希望刪除具有別名 '4e440328-10f0-7522-1dc9-e6a565ea3eb8' 的證書嗎(是(y)/否(n))? y
信息: 已成功刪除證書。
bash-2.05# ovcert -remove CA_4e440328-10f0-7522-1dc9-e6a565ea3eb8 -ovrg server
* 您真的希望刪除具有別名 'CA_4e440328-10f0-7522-1dc9-e6a565ea3eb8' 的證書嗎(是(y)/否(n))? y
信息: 已成功刪除證書。
bash-2.05# ovcert -list
+---------------------------------------------------------+
| 密鑰庫內容 |
+---------------------------------------------------------+
| 證書: |
+---------------------------------------------------------+
| 信任證書: |
+---------------------------------------------------------+
+---------------------------------------------------------+
| 密鑰庫內容 (OVRG: server) |
+---------------------------------------------------------+
| 證書: |
+---------------------------------------------------------+
| 信任證書: |
+---------------------------------------------------------+
bash-2.05# ovcm -newcacert
信息: 正在生成新的 CA 密鑰對...
信息: 正在安裝...
信息: 安裝已成功。
bash-2.05# ovcert -list
+---------------------------------------------------------+
| 密鑰庫內容 |
+---------------------------------------------------------+
| 證書: |
+---------------------------------------------------------+
| 信任證書: |
+---------------------------------------------------------+
+---------------------------------------------------------+
| 密鑰庫內容 (OVRG: server) |
+---------------------------------------------------------+
| 證書: |
+---------------------------------------------------------+
| 信任證書: |
| CA_4e440328-10f0-7522-1dc9-e6a565ea3eb8 (*) |
+---------------------------------------------------------+
bash-2.05# ovcert -exporttrusted -file /tmp/trustedcertif -ovrg server
信息: 信任證書已成功導出到文件 '/tmp/trustedcertif'。
bash-2.05# ovcert -importtrusted -file /tmp/trustedcertif
信息: 導入操作已成功。
bash-2.05# ovcert -list
+---------------------------------------------------------+
| 密鑰庫內容 |
+---------------------------------------------------------+
| 證書: |
+---------------------------------------------------------+
| 信任證書: |
| CA_4e440328-10f0-7522-1dc9-e6a565ea3eb8 |
+---------------------------------------------------------+
+---------------------------------------------------------+
| 密鑰庫內容 (OVRG: server) |
+---------------------------------------------------------+
| 證書: |
+---------------------------------------------------------+
| 信任證書: |
| CA_4e440328-10f0-7522-1dc9-e6a565ea3eb8 (*) |
+---------------------------------------------------------+
注意:首先要通過hostname命令查看OVO服務器的主機名;
然後用ovcoreid命令確認OVO服務器的coreid;
bash-2.05# hostname
gaoqiao
bash-2.05# ovcoreid
73d0be3a-f9cb-753d-08c0-ca1bb93befc7
bash-2.05# ovcm -issue -file /tmp/certif -name gaoqiao -pass mypwd -coreid 73d0be3a-f9cb-753d-08c0-ca1bb93befc7
信息: 發佈的證書已寫入文件 '/tmp/certif'。
bash-2.05# ovcert -importcert -file /tmp/certif -pass mypwd -ovrg server
信息: 導入操作已成功。
bash-2.05# ovcert -importcert -file /tmp/certif -pass mypwd
信息: 導入操作已成功。
bash-2.05# rm /tmp/certif
bash-2.05# ovcert -list
+---------------------------------------------------------+
| 密鑰庫內容 |
+---------------------------------------------------------+
| 證書: |
| 39a6c086-c077-7545-17c1-cf0553f46f07 (*) |
+---------------------------------------------------------+
| 信任證書: |
| CA_4e440328-10f0-7522-1dc9-e6a565ea3eb8 |
+---------------------------------------------------------+
+---------------------------------------------------------+
| 密鑰庫內容 (OVRG: server) |
+---------------------------------------------------------+
| 證書: |
| 39a6c086-c077-7545-17c1-cf0553f46f07 (*) |
+---------------------------------------------------------+
| 信任證書: |
| CA_4e440328-10f0-7522-1dc9-e6a565ea3eb8 (*) |
+---------------------------------------------------------+
bash-2.05#
最後可以打開OVO通過派發模板進行驗證。