emmanuel-bv / iotedge-iva-nano

Quickstart to deploy an Intelligent Video Analytics application running at the edge over multiple cameras and with custom AI models.
45 stars 19 forks source link

Certificate Expired #46

Open Y07yoyo opened 3 years ago

Y07yoyo commented 3 years ago

Hi @ebertrams and @sseiber,

I recently came across an issue with a certificate causing our IoT Central application to stop working. I have attached the logs from the edgeHub and edgeAgent from one of our applications. (Please scroll down to the last section of the logs)

I have also attached the logs from the IoTCentralBridge module of another application experiencing a certificate issue.

edgeHubLogs.txt edgeAgentLogs.txt IoTCentralBridgeLogs.txt

Do you know why this must be happening?

Kind Regards,

Yusuf Abdulhussein

sseiber commented 3 years ago

@Y07yoyo - this issue (certificate expired) looks like what happens the automatically generated self-signed device CA certificate expires (default 90 days). This certificate is meant for development only. It will be regenerated automatically by restarting the edge runtime. You also have the option of specifying a longer period than 90 days. Of course, real CA-signed certificates would be recommended for production scenarios.

Here is the relevant info: https://docs.microsoft.com/en-us/azure/iot-edge/how-to-manage-device-certificates#customize-certificate-lifetime

Y07yoyo commented 3 years ago

Hi @sseiber ,

Thank you for that information, I will look into how to create a production certificate. The issue is that we recently only restarted the device so it had only been running for about 5 days. From reading the article, the certificate should have restarted upon restarting the device?

Kind Regards,

Yusuf