Is there places where I can put key,cert and ca for mtls? about go-libvirt HOT 3 CLOSED

I think you want to look at DomainMigrate3, where you can provide a connection to the destination host as part of the call. You can also look at the virsh sources to see how it builds its connection objects when certs are used.

from go-libvirt.

Yes you can provide the connection via the following:

dconnuri := []string{"qemu+tls://foo/system"}

if _, err := l.DomainMigratePerform3Params(dom, dconnuri,

	[]TypedParam{}, []byte{}, flags); err != nil {

	t.Fatalf("unexpected live migration error: %v", err)

}

I can specify the string to be qemu+tls. However, I am having a disconnection on where to put the key,cert and ca information for mtls to work. in virsh, it will read the the keys,cert and ca.pem in the locations i specifiy on OP automatically.

Mtls require the client to provide it's own set of key,cert. (The ca on the client side is to trust the cert from the server hosting libvirtd via tls.)

from go-libvirt.

The code that reads the cert and key from disk is part of virsh, not libvirt's rpc interface. It would be possible to add such a thing to go-libvirt as a convenience function, but it doesn't exist today. I'm going to close this issue, but if you want to file a PR for this work, you can reopen it for discussion.

from go-libvirt.