mirror of
https://github.com/lxc/incus.git
synced 2026-02-05 09:46:19 +01:00
doc: Add clientcerts
Signed-off-by: Stéphane Graber <stgraber@stgraber.org>
This commit is contained in:
@@ -69,6 +69,7 @@ Various configuration files are stored in that directory, for example:
|
||||
- `client.crt`: client certificate (generated on demand)
|
||||
- `client.key`: client key (generated on demand)
|
||||
- `config.yml`: configuration file (info about `remotes`, `aliases`, etc.)
|
||||
- `clientcerts/`: directory with per-remote client certificates
|
||||
- `servercerts/`: directory with server certificates belonging to `remotes`
|
||||
|
||||
## Why can I not ping my Incus instance from another host?
|
||||
|
||||
@@ -58,6 +58,9 @@ To configure a global remote, create or edit a `config.yml` file that is located
|
||||
Certificates for the remotes must be stored in the `servercerts` directory in the same location (for example, `/etc/incus/servercerts/`).
|
||||
They must match the remote name (for example, `foo.crt`).
|
||||
|
||||
It's also possible to provide per-remote client certificates by placing them in the `clientcerts` directory.
|
||||
The similarly must match the remote name (for example, `foo.crt` and `foo.key`).
|
||||
|
||||
See the following example configuration:
|
||||
|
||||
```
|
||||
|
||||
Reference in New Issue
Block a user