<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<font face="Droid Serif">I've setup my own PKI infrastructure for my
LXD hosts and I'm trying to add a remote, but I'm getting an error
about no certificate being provided:<br>
<br>
<font face="Droid Sans Mono"> lxc remote add blllxd03
<a class="moz-txt-link-freetext" href="https://blllxd03.appendata.net:8443">https://blllxd03.appendata.net:8443</a><br>
Admin password for blllxd03: <br>
error: No client certificate provided</font><br>
<br>
If I run it with debug I see this after entering the trust
password:<br>
<br>
<font face="Droid Sans Mono"> [...]<br>
Admin password for blllxd03: <br>
INFO[10-01|11:50:41] Sending request to
LXD etag= method=POST
url=<a class="moz-txt-link-freetext" href="https://blllxd03.appendata.net:8443/1.0/certificates">https://blllxd03.appendata.net:8443/1.0/certificates</a><br>
DBUG[10-01|11:50:41] <br>
{<br>
"name": "",<br>
"type": "client",<br>
"certificate": "",<br>
"password": "XXXXXXX"<br>
} <br>
DBUG[10-01|11:50:41] Trying to remove
/home/lxduser/.config/lxc/servercerts/blllxd03.crt <br>
error: No client certificate provided</font><br>
<br>
Why would the remote not send its certificate? I have the files:
server.ca, server.crt, and server.key in /var/lib/lxd/ for both
the server and the remote. I replaced the the default files with
my own. I can verify with OpenSSL that all the certs are valid and
signed by the CA.<br>
<br>
Thanks,<br>
Joshua Schaeffer<br>
</font>
</body>
</html>