Adding TLS Verification to Xenserver pools - Pau Ruiz Safont, Citrix

Описание: Original upload: 2022 Nov 16

Adding TLS Verification to Xenserver pools - Pau Ruiz Safont, Citrix

Xenserver has used TLS connections for years to communicate hosts within a pool. However the client-side never verified the remote server's identity. It has taken about ten years to get a working solution that finally enables verification of both sides of the connections. This talk goes over the previous proposal to achieve certificate verification in a pool, the complexities that had to be solved before achieving it and how does the system manage certificates to make the feature work without any downtimes.