tools: support validating user/custom PKI certs

The virt-pki-validate command can validate the system certificate
directories. The remote driver, however, also supports a standard
per-user certs location, as well as a runtime custom path. This
extends the validation tool to be able to cope with these alternate
locations too.

Reviewed-by: Michal Privoznik <mprivozn@redhat.com>
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
This commit is contained in:
Daniel P. Berrangé
2024-06-07 11:30:35 +01:00
parent 8e97fd4181
commit acb26f22a1
2 changed files with 197 additions and 79 deletions

View File

@@ -15,7 +15,7 @@ SYNOPSIS
========
``virt-pki-validate`` [*OPTION*]
``virt-pki-validate`` [*OPTION*] [trust|server|client]
DESCRIPTION
@@ -26,6 +26,9 @@ a secure libvirt server or client using the TLS encryption protocol.
It will report any missing certificate or key files on the host. It
should be run as root to ensure it can read all the necessary files
With no arguments it will check the trusted CA config, the server
config and the client config. The optional positional argument can
be used to restrict the checks to just one of these three sets.
OPTIONS
=======