error on readd a node

[informant]

Hi, we have change on cluster the rpivat key ssl certificate pve-ssl.pem to a real certificate.

we add a note to cluster and get the error message:

...
generating node certificates
Signature ok
subject=/OU=PVE Cluster Node/O=Proxmox Virtual Environment/CN=server1.domain.de
Getting CA Private Key
CA certificate and CA private key do not match
3192:error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch:x509_cmp.c:406:
unable to generate pve ssl certificate:
command 'openssl x509 -req -in /tmp/pvecertreq-1675.tmp -days 3650 -out /etc/pve/nodes/server1/pve-ssl.pem -CAkey /etc/pve/priv/pve-root-ca.key -CA /etc/pve/pve-root-ca.pem -CAserial /etc/pve/priv/pve-root-ca.srl -extfile /tmp/pvesslconf-1675.tmp' failed: exit code 1

after this we have copy the cluster pve-ssl.pem to node, delete teh node on cluster and readd the node, but we get this error message:

authentication key already exists

what can we do, to add this node back to the cluster? do you have infomation or steps to add the node back to cluster with correcly ssl-zertificate? do we must upload the pve-ssl.pem of cluster to node and add the node after this or how we must add the node to cluster without error? please help. very thanks

regards

 

[dietmar]

There is also a '--force' flag (see 'man pvecm')

 

[informant]

Morning dietmar,

thanks for your fast answer.
you mean also, i must install the node new and add the node with --force flag again to cluster, without change the ssl cert on the node, right?

regards

 

[informant]

@dietmar,

do we must use on node the pve-ssl.pem of cluster or the original created of node, before we add with --force?

regards