[Spice-devel] Why is the CA certificate needed on the SPICE server?

[Andrea Spadaccini]

Hello,
I am implementing SPICE support in Ganeti
(http://code.google.com/p/ganeti), and while implementing TLS I
noticed that the SPICE server needs, apart from his key and
certificate, also the certificate of the CA that signed its
certificate.

I found the relevant code in reds.c (reds_init_ssl()), but I am not
very confident with SSL so I don't really understand why the server
would need the CA certificate.

Can anyone explain it to me?

Thanks,
Andrea