pveproxy-ssl / pve-ssl

[GoXLd]

Hello everyone,
I’ve noticed that in a Proxmox cluster, the SSL key pair is stored in /etc/pve/nodes/itsok/pveproxy-ssl.*, whereas on a standalone node, it is located in /etc/pve/nodes/itsoktoo/pve-ssl.*.
I’d like to understand whether this is the expected behavior of the system or if it depends on the certificate validation method (e.g., DNS vs. HTTP)?

Any insights would be greatly appreciated!

 

[Stoiko Ivanov]

see the reference documentation: https://pve.proxmox.com/pve-docs/chapter-sysadmin.html#sysadmin_certificate_management
both certificates serve different purposes in a cluster

I hope this helps!