Displaying 2 results from an estimated 2 matches for "migrate_tls".
2023 Sep 11
2
Question about encryption and tls
...ious requirements for
various use cases.
> protocol (BTW not spice?), so I am confused.
> should I configure in /etc/libvirt/qemu.conf
>
There is default_tls which should be enough to start, then you need to
turn on tls usage for want. There's vnc_tls, spice_tls, vxhs_tls,
nbd_tls, migrate_tls, backup_tls, and you can even configure different
certificates for each of them.
>spice_tls option and certificates ?
>
That, and also don't forget to configure the domain XML so that it uses
what you want, probably something like:
<graphics type='spice' tlsPort='-1'...
2023 Sep 10
2
Question about encryption and tls
(Posted few days ago on qemu group but no reactions)
Do I understand correctly that ssl shoudl be configured independently
for libvirt and each hypervisor?
I asked because I configured libvirt connection as
qemu+tls://bambus.kjonca/system?pkipath=...
(and on bambus in /etc/libvirt/libvirtd.conf) I set
key_file = ...
cert_file = ...
ca_file = ...
But after connect and lauching (on bambus) vm I