HTTPS client certificate authentication

[hevisko]

Hi there,

Using the new Proxmox 3.0, where/how could I import/set client certificates to limit the world wide access to proxmox servers in the wild to only my own PCs/browsers with my personal private keys?

 

[dietmar]

You can restrict access to specific IPs (see 'man pveproxy')

 

[hevisko]

Which is problematic when I'm behind ADSL lines, 3G phones and WiFi hotspots that change every so often ;(

 

[dietmar]

which is problematic when i'm behind adsl lines, 3g phones and wifi hotspots that change every so often ;(

vpn?

 

[hevisko]

vpn?

Which is the last resort as it means adding extra software/service to the host I do not want as I wanted to shut down SSH too --- have a console/shell through the ProxMox interface, so don't need extra service unless I really need it.

 

[ñull]

Which is the last resort as it means adding extra software/service to the host I do not want as I wanted to shut down SSH too --- have a console/shell through the ProxMox interface, so don't need extra service unless I really need it.

The other way would be to install Apache as proxy, but I agree that without extra service would be preferrable.

Is CCA already possible in the latest Proxmox? Could this be feature request?

 

[tom]

The other way would be to install Apache as proxy, but I agree that without extra service would be preferrable.

Is CCA already possible in the latest Proxmox? Could this be feature request?

pls file an enhancement request on https://bugzilla.proxmox.com

not sure if a developer picks this up soon.

 

[ñull]

not sure if a developer picks this up soon.

I don't know in what language this part of the software is written. Since this is Open Source, it would be nice to know where we might hack this ourselves.

 

[dietmar]

I don't know in what language this part of the software is written. Since this is Open Source, it would be nice to know where we might hack this ourselves.

It is written in perl: https://git.proxmox.com/?p=pve-manager.git;a=summary

 

[RolandK]

i did an RFE at https://bugzilla.proxmox.com/show_bug.cgi?id=4241