Hi all:
The VNC of QEMU suppots TLS encryption. The client & server can use arbitrary certificates from CA certificates the running VM loaded(user can use new certificates immediately), but if the CA certificate is changed to a new one,the running VM still use the old CA.
Is it reasonable to provide an API(e.g.QMP) to replace the CA certificate for running VM live?Any security problem?
Regards,
Zihao