Re: [libvirt] qemu+tls server certificate validation failure (The certificate is not trusted)

2009-04-27 Thread Scott Beardsley
> BTW, will certtool verify certs ala "openssl verify" ? $ certtool --verify-chain --infile /etc/pki/CA/cacert.pem |grep Verification Verification output: Verified. I found the verify-chain option but it doesn't like it when I add my x509 client cert. -- Libvir-list mailing list Libvir-l

Re: [libvirt] qemu+tls server certificate validation failure (The certificate is not trusted)

2009-04-27 Thread Scott Beardsley
> This error message comes from gnutls_certificate_verify_peers2() and > maps to the annoyingly generic GNUTLS_CERT_INVALID error code. indeed >> The server's config has not changed (I've tested against libvirt-bin >> versions 0.4.4-3ubuntu3.1 and 0.4.0-2ubuntu8.1 on the server side). I >> have t

Re: [libvirt] qemu+tls server certificate validation failure (The certificate is not trusted)

2009-04-27 Thread Daniel P. Berrange
On Mon, Apr 27, 2009 at 02:37:28PM -0700, Scott Beardsley wrote: > I'm having a problem with remote TLS libvirt connections from an > Ubuntu Jaunty client. I've reported the bug here[1] but haven't had > any hits yet so I thought I'd come to the source. Let me know if ya'll > have any ideas or know

[libvirt] qemu+tls server certificate validation failure (The certificate is not trusted)

2009-04-27 Thread Scott Beardsley
I'm having a problem with remote TLS libvirt connections from an Ubuntu Jaunty client. I've reported the bug here[1] but haven't had any hits yet so I thought I'd come to the source. Let me know if ya'll have any ideas or know of any bugs in the versions I'm using (see below). I just upgraded my cl