search for: crl_file

...rt error code: 38, message: unable to connect to 'esxhost': Connection refused I have also tried suggestion on webpage above regarding these libvirtd.conf settings and restarted libvirtd: tls_no_verify_certificate = 1 key_file = "" cert_file = "" ca_file = "" crl_file = "" ... But no change. The problem may well be the TLS certificates, PKI isn't one of my strong points. I believe the hostnames in the certificates are correct. Which certificates (if any) should be copied to the ESXi host (client or server)? Should I copy any certificates from /et...

I am thinking of using tls connection between my client and server instead of current ssh. I found https://libvirt.org/kbase/tlscerts.html and I want to know if it is possible to customise some setting (e.g. use my own cert names, or locations) but I was not able to. Moreover https://github.com/libvirt/libvirt/blob/44520f6e01580d6bada88b47e5b77e6bee023ac6/src/rpc/virnettlscontext.c suggests that

...bt full #0 lpcfg_tls_verify_peer (lp_ctx=0x0) at default/lib/param/param_functions.c:352 No locals. #1 0x00007fffe3ce895f in ldap_connect_send (conn=0xd30e70, url=url at entry=0xad02d4 "ldaps://ldap.motec.com.au") at ../source4/libcli/ldap/ldap_client.c:469 ca_file = 0x0 crl_file = 0x0 tls_priority = 0x0 verify_peer = <optimized out> status = {v = 0} result = 0xd31180 ctx = <optimized out> state = 0xd31220 protocol = "ldaps\000\000\000", <incomplete sequence \336> ret = <optimized...

On Fri, 2017-02-17 at 07:48 +1100, Tom Robinson via samba wrote: > Anyone? Can you please post a gdb backtrace --full? -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 862 bytes Desc: This is a digitally signed message part URL: