search for: pkipath

(Posted few days ago on qemu group but no reactions) Do I understand correctly that ssl shoudl be configured independently for libvirt and each hypervisor? I asked because I configured libvirt connection as qemu+tls://bambus.kjonca/system?pkipath=... (and on bambus in /etc/libvirt/libvirtd.conf) I set key_file = ... cert_file = ... ca_file = ... But after connect and lauching (on bambus) vm I tried to snif traffic to bambus:5900 on client) and wireshark was able to detect "VNC" protocol (BTW not spice?), so I am confused. sho...

...Hyper-V returned DECLINED 2012-06-26 19:48:53.279+0000: 26051: debug : doRemoteOpen:542 : proceeding with name = xenapi:// 2012-06-26 19:48:53.280+0000: 26051: debug : doRemoteOpen:552 : Connecting with transport 0 2012-06-26 19:48:53.280+0000: 26051: debug : virNetTLSContextLocateCredentials:753 : pkipath=(null) isServer=0 tryUserPkiPath=0 2012-06-26 19:48:53.280+0000: 26051: debug : virNetTLSContextLocateCredentials:825 : Using default TLS CA certificate path 2012-06-26 19:48:53.280+0000: 26051: debug : virNetTLSContextLocateCredentials:831 : Using default TLS CA revocation list path 2012-06-26 19:...

Hi all, I'm trying to figure out how to get my desktop talking to two libvirt hosts using qemu+tls and I've read that virsh relies on hard coded paths to the certificates.. which seems to be true. Is there a way to tell virsh to use a different path to a certificate, or another way people solve this presently? Cheers, Ant -------------- next part -------------- An HTML attachment was

Hi there, I'm trying to establish a TLS connection to libvirtd with certificates verification from a python script. My question is quite simple: is it possible to set the client certificate/keyfile path from within a python script? or it has to be in /etc/pki/libvirt/... Thanks in advance for any help Wojciech Gumularz

...nd correctly that ssl shoudl be configured independently >for libvirt and each hypervisor? It depends what you are asking about. There are various connections, each of you can configure separately. >I asked because I configured libvirt connection as > >qemu+tls://bambus.kjonca/system?pkipath=... > This ^^ uses TLS to communicate between the libvirt client and server, e.g. virsh. >(and on bambus in /etc/libvirt/libvirtd.conf) I set >key_file = ... >cert_file = ... >ca_file = ... > >But after connect and lauching (on bambus) vm I tried to snif traffic to > bambu...

I am thinking of using tls connection between my client and server instead of current ssh. I found https://libvirt.org/kbase/tlscerts.html and I want to know if it is possible to customise some setting (e.g. use my own cert names, or locations) but I was not able to. Moreover https://github.com/libvirt/libvirt/blob/44520f6e01580d6bada88b47e5b77e6bee023ac6/src/rpc/virnettlscontext.c suggests that

......] > > but I am not able to connect with virt-manager. Got message: > > Viewer was disconnected. > Encountered SPICE error-tls After some stracing I found that CA used by qemu should be in /etc/ssl/certs/ca-certificates.crt (on client machine) is any way to specify this CA? "?pkipath=/home/kjonca/.config/libvirt/ssl" seems not to be passed during connection to vm console. KJ