rhtyd commented on issue #2551: agent: import letsencrypt X3 cross signed 
certificate to ssvm agent keystore
URL: https://github.com/apache/cloudstack/pull/2551#issuecomment-379494931
 
 
   Yes, you're right @rafaelweingartner it's not difficult to rename the 
keystore at all. In fact, I'm even considering, to get rid of this keystore 
file or symlink to the default system one (at /etc/ssl/certs/java/cacert, with 
password: `changeit`). The issue I found was that even when I updated the 
system `cacert` the agent failed to load that, since the old keystore file is 
used by default. Doing so may require some testing around using custom SSL 
certs for both SSVM and CPVM. Keeping a separate ca-cert file for cloudstack 
will cause a pain, when another provider's cert/chain are missing.

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


With regards,
Apache Git Services

Reply via email to