[libvirt-users] Libvirt TLS with Short Lived Certificates

Martin Kletzander mkletzan at redhat.com
Mon Oct 1 12:27:07 UTC 2018


On Wed, Sep 26, 2018 at 09:06:07AM -0700, Charles Urquiola wrote:
>I want to use short lived certificates with libvirtd to provided TLS access
>to the daemon.  New certificates are generated on a daily basis and
>delivered to the host.  Does libvirtd re-read TLS certificates with a
>reload of the service, systemctl reload libvirtd, or with a SIGHUP or is a
>full restart of the daemon required?
>

If I'm reading the code correctly it needs a full restart.  That's something
that could be changed so that it is done on reload as well.  Care to submit a
proposal? O:-)

>--charlie

>_______________________________________________
>libvirt-users mailing list
>libvirt-users at redhat.com
>https://www.redhat.com/mailman/listinfo/libvirt-users

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: Digital signature
URL: <http://listman.redhat.com/archives/libvirt-users/attachments/20181001/394ce7fe/attachment.sig>


More information about the libvirt-users mailing list