Im using my own TLS certificate in PVE WebUI. But how can I setup How can I setup my custom TLS certificates in the SPICE protocol used by Proxmox PVE?
SPICE TLS certificates
- Thread starter cryptodntsleep
- Start date
you can't. the self-signed certificate and CA are pinned in the generated spice config and (their paths) hardcoded in the spiceterm binary. the reason for this is that it was impossible to support both pinned self-signed certificates, and using the system trust store on the client side for certificates trusted by the client's OS because of limitations of the remote viewer openssl handling. I am not sure whether this has changed in the meantime, but given that both sides (client config and server-side) are controlled by PVE, there is no downside to using the self-signed certificate (compared to the web interface, where obviously PVE has no control over the browser's trust settings, so a 'trusted-out-of-the-box' certificate provides a better experience and comes with different security properties).