26 Jan
2011
26 Jan
'11
1:54 p.m.
2011/1/24 Osier Yang <jyang@redhat.com>:
This new parameter allows user specifies where the client cerficate, client key, CA certificate of x509 is, instead of hardcoding it. If 'pkipath' is not specified, and the user is not root, try to find files in $HOME/.pki, as long as one of client cerficate, client key, CA certificate can not be found, use default global location (LIBVIRT_CACERT, LIBVIRT_CLIENTCERT, LIBVIRT_CLIENTKEY, see src/remote/remote_driver.h)
Isn't $HOME/.pki a bit to general? Shouldn't it be more specific like $HOME/.pki/libvirt or $HOME/.libvirt/pki? Matthias