How to get client certificate? Where it is stored?

Incus
1

So, I think that the documentation is very poor on that. Remote API authentication - Incus documentation states:

The preferred way to add trusted clients is to directly add their certificates to the trust store on the server. To do so, copy the client certificate to the server and register it using incus config trust add-certificate <file>.

But where is the client certificate actually stored? There is no information on that. I managed to get servers connected using tokens, now I tried to do this just copying certificates and I cannot do this because I cannot locate client certificates, and there appears to be no information on that in the docs. If this is the recommended method, we need information where to get the client certificate from. Does anyone know? :slight_smile:

1 Like
2

Alright, I found it in ~/.config/incus directory. I assume it has to be previously generated by incus remote generate-certificate . I really think it should be explicitly mentioned in documentation. :slight_smile:

1 Like
3

It’s auto-generated the first time it’s needed.

1 Like