search for: spice_tls

Displaying 3 results from an estimated 3 matches for "spice_tls".

2023 Sep 10
2
Question about encryption and tls
...d.conf) I set key_file = ... cert_file = ... ca_file = ... But after connect and lauching (on bambus) vm I tried to snif traffic to bambus:5900 on client) and wireshark was able to detect "VNC" protocol (BTW not spice?), so I am confused. should I configure in /etc/libvirt/qemu.conf spice_tls option and certificates ? KJ
2023 Sep 11
2
Question about encryption and tls
...is because there might be various requirements for various use cases. > protocol (BTW not spice?), so I am confused. > should I configure in /etc/libvirt/qemu.conf > There is default_tls which should be enough to start, then you need to turn on tls usage for want. There's vnc_tls, spice_tls, vxhs_tls, nbd_tls, migrate_tls, backup_tls, and you can even configure different certificates for each of them. >spice_tls option and certificates ? > That, and also don't forget to configure the domain XML so that it uses what you want, probably something like: <graphics type='...
2017 Dec 30
1
spice server and GSSAPI
...kvmhost01 in /etc/qemu-kvm/krb5.tab - the above file has owner:group set to qemu:root with perms 600 - I have the following in /etc/sasl2/qemu-kvm.conf mech_list: gssapi keytab: /etc/qemu-kvm/krb5.tab - I have the following in /etc/libvirt/qemu.conf spice_listen = "0.0.0.0" spice_tls = 0 spice_sasl = 1 spice_sasl_dir = "/etc/sasl2/" - the first time I try to view a console, I get the kerberos tickets I expect to: Ticket cache: KEYRING:persistent:625400004:krb_ccache_7rtJmh8 Default principal: ranbir at THEINSIDE.RNR Valid starting Expires...