I need to setup TLS for our KVM based hypervisors (a mix of CentOS7 and CentOS 8). I have a server/client certificate set for each server, signed from our Intermediate CA. On each server the CA's certificate is installed and system's trusts are updated.

I want to setup the tls_allowed_dn_list and of course to define the CA file in my libvirt.conf.
So, to which file should I point libvirt, the Intermediate's CA certificate or the CA's ?

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.