Bug 94200 - Add support for multiple CAs in truststore
Summary: Add support for multiple CAs in truststore
Status: RESOLVED MOVED
Alias: None
Product: Spice
Classification: Unclassified
Component: virt-viewer (show other bugs)
Version: unspecified
Hardware: All Linux (All)
: medium enhancement
Assignee: Spice Bug List
QA Contact:
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2016-02-17 23:28 UTC by r
Modified: 2018-06-05 14:18 UTC (History)
1 user (show)

See Also:
i915 platform:
i915 features:


Attachments

Description r 2016-02-17 23:28:10 UTC
Apparently, virt-viewer/remote-viewer does not support having more than one root CA in the Trust Store as of now. This feature would make it easier when dealing with multiple remote systems that do not share a common CA. Changing between multiple CAs via commandline parameter/ini file is a workaround, but for me a "trust store" suggests that it could hold more than one CA.

Optionally: use /etc/ssl/certs to accept system-wide installed CAs as a default.
Comment 1 David Jaša 2016-02-18 11:41:28 UTC
What OS and virt-viewer version are you using? System-wide CAs work for me for quite a long time already... In order to use them, do this:
1. copy the CA cert to /etc/pki/ca-trust/source/anchors/ directory
2. run update-ca-trust

or the same in a single command:
trust anchor /path/to/your/CA_cert.pem

Playing with trust stores manually isn't great idea in general since shared system certificates are available:
https://fedoraproject.org/wiki/Features/SharedSystemCertificates
https://www.happyassassin.net/2015/01/14/trusting-additional-cas-in-fedora-rhel-centos-dont-append-to-etcpkitlscertsca-bundle-crt-or-etcpkitlscert-pem/
Comment 2 GitLab Migration User 2018-06-05 14:18:54 UTC
-- GitLab Migration Automatic Message --

This bug has been migrated to freedesktop.org's GitLab instance and has been closed from further activity.

You can subscribe and participate further through the new bug through this link to our GitLab instance: https://gitlab.freedesktop.org/spice/spice-gtk/issues/47.


Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.