certificates: Make sure vmconsole ssh keys are refreshed if needed

Checks for vmconsole-proxy-host and vmconsole-proxy-user certificates
status were missing, resulting in those certificates not renewed when
needed.  This patch adds the missing checks.

Bug-Url: https://bugzilla.redhat.com/2066084

packaging/setup/plugins/ovirt-engine-setup/vmconsole_proxy_helper/pki.py

@@ -274,6 +274,16 @@ def _miscPKIEngine(self):
             )
         )
 
+    def _ssh_cert_file(self, suffix):
+        file_name = '%s-%s.cer' % (
+            ovmpcons.Const.VMCONSOLE_PROXY_PKI_NAME,
+            suffix
+        )
+        return os.path.join(
+            oenginecons.FileLocations.OVIRT_ENGINE_PKICERTSDIR,
+            file_name
+        )
+
     @plugin.event(
         stage=plugin.Stages.STAGE_MISC,
         after=(
@@ -282,12 +292,16 @@ def _miscPKIEngine(self):
         condition=lambda self: (
             self.environment[
                 ovmpcons.ConfigEnv.VMCONSOLE_PROXY_CONFIG
-            ] and _refresh_needed(
-                os.path.join(
-                    ovmpcons.FileLocations.VMCONSOLE_PKI_DIR,
-                    'proxy-ssh_host_rsa',
-                ),
-                check_cert=False
+            ] and (
+                _refresh_needed(
+                    os.path.join(
+                        ovmpcons.FileLocations.VMCONSOLE_PKI_DIR,
+                        'proxy-ssh_host_rsa',
+                    ),
+                    check_cert=False
+                ) or
+                _refresh_needed(self._ssh_cert_file('user')) or
+                _refresh_needed(self._ssh_cert_file('host'))
             )
         ),
     )