1
0
mirror of https://github.com/lxc/incus.git synced 2026-02-05 09:46:19 +01:00

doc: Add clientcerts

Signed-off-by: Stéphane Graber <stgraber@stgraber.org>
This commit is contained in:
Stéphane Graber
2024-03-20 13:41:25 -04:00
parent 3789cd7a0c
commit 99b74277b9
2 changed files with 4 additions and 0 deletions

View File

@@ -69,6 +69,7 @@ Various configuration files are stored in that directory, for example:
- `client.crt`: client certificate (generated on demand)
- `client.key`: client key (generated on demand)
- `config.yml`: configuration file (info about `remotes`, `aliases`, etc.)
- `clientcerts/`: directory with per-remote client certificates
- `servercerts/`: directory with server certificates belonging to `remotes`
## Why can I not ping my Incus instance from another host?

View File

@@ -58,6 +58,9 @@ To configure a global remote, create or edit a `config.yml` file that is located
Certificates for the remotes must be stored in the `servercerts` directory in the same location (for example, `/etc/incus/servercerts/`).
They must match the remote name (for example, `foo.crt`).
It's also possible to provide per-remote client certificates by placing them in the `clientcerts` directory.
The similarly must match the remote name (for example, `foo.crt` and `foo.key`).
See the following example configuration:
```