From: Martin Kletzander <mkletzan@redhat.com>

Signed-off-by: Martin Kletzander <mkletzan@redhat.com>
---
 NEWS.rst | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/NEWS.rst b/NEWS.rst
index 2559aaf7e031..a831c76be5b0 100644
--- a/NEWS.rst
+++ b/NEWS.rst
@@ -39,6 +39,11 @@ v11.5.0 (unreleased)
     that it is the controller which ultimately has the serial number attached to
     it, but for ease of use it is automatically copied from the disk serial.
 
+  * esx: Add support for specifying alternative CA bundle for remote peer verification
+
+    Users can now use ``cainfo_path`` parameter in the URI to override the
+    default location used to search for CA certificates.
+
 * **Improvements**
 
 * **Bug fixes**
-- 
2.49.0

On a Monday in 2025, Martin Kletzander via Devel wrote:
>From: Martin Kletzander <mkletzan@redhat.com>
>
>Signed-off-by: Martin Kletzander <mkletzan@redhat.com>
>---
> NEWS.rst | 5 +++++
> 1 file changed, 5 insertions(+)
>
>diff --git a/NEWS.rst b/NEWS.rst
>index 2559aaf7e031..a831c76be5b0 100644
>--- a/NEWS.rst
>+++ b/NEWS.rst
>@@ -39,6 +39,11 @@ v11.5.0 (unreleased)
>     that it is the controller which ultimately has the serial number attached to
>     it, but for ease of use it is automatically copied from the disk serial.
>
>+  * esx: Add support for specifying alternative CA bundle for remote peer verification
>+
>+    Users can now use ``cainfo_path`` parameter in the URI to override the
>+    default location used to search for CA certificates.
>+

The wording here makes me think it's a directory.

Consider:

default path to the CA certificate

Reviewed-by: Ján Tomko <jtomko@redhat.com>

Jano

On Wed, Jun 11, 2025 at 05:12:50PM +0200, Ján Tomko wrote:
>On a Monday in 2025, Martin Kletzander via Devel wrote:
>>From: Martin Kletzander <mkletzan@redhat.com>
>>
>>Signed-off-by: Martin Kletzander <mkletzan@redhat.com>
>>---
>> NEWS.rst | 5 +++++
>> 1 file changed, 5 insertions(+)
>>
>>diff --git a/NEWS.rst b/NEWS.rst
>>index 2559aaf7e031..a831c76be5b0 100644
>>--- a/NEWS.rst
>>+++ b/NEWS.rst
>>@@ -39,6 +39,11 @@ v11.5.0 (unreleased)
>>     that it is the controller which ultimately has the serial number attached to
>>     it, but for ease of use it is automatically copied from the disk serial.
>>
>>+  * esx: Add support for specifying alternative CA bundle for remote peer verification
>>+
>>+    Users can now use ``cainfo_path`` parameter in the URI to override the
>>+    default location used to search for CA certificates.
>>+
>
>The wording here makes me think it's a directory.
>
>Consider:
>
>default path to the CA certificate
>

The .pem file can have multiple certificates, for example when you might
need to have a whole certificate chain.  I'll rewrite it so that it
specifically mentions a file path.  Thanks

>Reviewed-by: Ján Tomko <jtomko@redhat.com>
>
>Jano