<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html>
<head>
  <meta name="Generator" content="Zarafa WebApp v7.1.11-46050">
  <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
  <title>RE: [virt-tools-list] Windows version of virsh - where to put certs?</title>
</head>
<body>
<p><span data-mce-bogus="true" id="_mce_caret"><span data-mce-style="font-size: 10pt; font-family: tahoma,arial,helvetica,sans-serif;" style="font-size: 10pt; font-family: tahoma,arial,helvetica,sans-serif;">Answering my own question, since I never in a million years would have guessed the correct location. Hopefully it helps somebody else.</span></span></p><p><span data-mce-style="font-size: 10pt; font-family: tahoma,arial,helvetica,sans-serif;" style="font-size: 10pt; font-family: tahoma,arial,helvetica,sans-serif;">Not only is the location hard-coded; the hard-coded path is half absolute and half relative.<br data-mce-bogus="1"></span></p><p><span data-mce-style="font-size: 10pt; font-family: tahoma,arial,helvetica,sans-serif;" style="font-size: 10pt; font-family: tahoma,arial,helvetica,sans-serif;">The absolute path is indeed the exact path from the error message (with the directory separators replaced of course), but it must be on whatever drive letter is the current drive when you actually start virsh.<br></span></p><p><span data-mce-style="font-size: 10pt; font-family: tahoma,arial,helvetica,sans-serif;" style="font-size: 10pt; font-family: tahoma,arial,helvetica,sans-serif;">So if you start virsh from E:\myfiles then the correct path is (for the 64-bit version of virsh):<br data-mce-bogus="1"></span></p><p><span data-mce-style="font-size: 10pt; font-family: tahoma,arial,helvetica,sans-serif;" style="font-size: 10pt; font-family: tahoma,arial,helvetica,sans-serif;">E:\usr\x86_64-w64-mingw32\sys-root\mingw\etc\pki\CA</span></p><p><span data-mce-style="font-size: 10pt; font-family: tahoma,arial,helvetica,sans-serif;" style="font-size: 10pt; font-family: tahoma,arial,helvetica,sans-serif;">(the client cert and key should be in the corresponding locations, of course).<br data-mce-bogus="1"></span></p><p><span data-mce-style="font-size: 10pt; font-family: tahoma,arial,helvetica,sans-serif;" style="font-size: 10pt; font-family: tahoma,arial,helvetica,sans-serif;">This will work only as long as you start virsh from anywhere on the E: drive - if you switch to, say, the C: drive, virsh will fail again.<br data-mce-bogus="1"></span></p><p>Kevin Keane</p><p style="null">The NetTech</p><p>http://www.4nettech.com</p><p>Our values: Privacy, Liberty, Justice</p><p>See https://www.4nettech.com/corp/the-nettech-values.html</p><p><br></p><blockquote style="border-left: 2px solid #325FBA; padding-left: 5px; margin: 0px 5px;"><span style="font-family:tahoma,arial,helvetica,sans-serif; font-size: 10pt;">-----Original message-----<br><span><strong>From:</strong> Kevin Keane Subscription <subscription@kkeane.com></span><br><span><strong>Sent:</strong> Tuesday 17th February 2015 21:09</span><br><span><strong>To:</strong> virt-tools-list@redhat.com</span><br><span><strong>Subject:</strong> [virt-tools-list] Windows version of virsh - where to put certs?</span><br><br></span><!-- begin sanitized html -->

  
  
  

<div class="bodyclass">
<p><span id="_mce_caret"><span style="font-size: 10pt; font-family: tahoma,arial,helvetica,sans-serif;">I'm trying to set up my Windows workstation (Windows 8.1) to be able to use virsh via TLS, but after Googling for hours, I just can't figure out where to put the certificate files in Windows (I have it working fine on a CentOS workstation).<br></span></span></p><p><span style="font-size: 10pt; font-family: tahoma,arial,helvetica,sans-serif;">The error message I'm getting says that it can't find the CA certificate, but is exceedingly unhelpful in describing where it *should* go. The path in the error message is obviously not valid in Windows.<br></span></p><p><span id="_mce_caret"><span style="font-size: 10pt; font-family: tahoma,arial,helvetica,sans-serif;">virsh # connect qemu://<myhost>/system<br>error: Failed to connect to the hypervisor<br>error: Cannot read CA certificate '/usr/x86_64-w64-mingw32/sys-root/mingw/etc/pki/CA/cacert.pem': No such file or directory<br></span></span></p><p><span style="font-size: 10pt; font-family: tahoma,arial,helvetica,sans-serif;">Thanks!<br></span></p><p>Kevin Keane</p><p style="null">The NetTech</p><p>http://www.4nettech.com</p><p>Our values: Privacy, Liberty, Justice</p><p>See https://www.4nettech.com/corp/the-nettech-values.html</p><p><br></p>
</div>
<pre>_______________________________________________<br>
virt-tools-list mailing list<br>
virt-tools-list@redhat.com<br>
https://www.redhat.com/mailman/listinfo/virt-tools-list</pre>
<!-- end sanitized html --></blockquote>
</body>
</html>