I need to setup TLS for our KVM based hypervisors (a mix of CentOS7 and CentOS 8). I have a server/client certificate set for each server, signed from our Intermediate CA. On each server the CA's certificate is installed and system's trusts are updated.
I want to setup the
tls_allowed_dn_list and of course to define the CA file in my libvirt.conf.
So, to which file should I point libvirt, the Intermediate's CA certificate or the CA's ?