From nobody Sun Sep 20 23:47:50 2026 Delivered-To: importer@patchew.org Received-SPF: pass (zohomail.com: domain of lists.libvirt.org designates 38.145.34.151 as permitted sender) client-ip=38.145.34.151; envelope-from=devel-bounces@lists.libvirt.org; helo=lists.libvirt.org; Authentication-Results: mx.zohomail.com; dkim=pass; spf=pass (zohomail.com: domain of lists.libvirt.org designates 38.145.34.151 as permitted sender) smtp.mailfrom=devel-bounces@lists.libvirt.org; arc=pass (i=1 dmarc=pass fromdomain=nutanix.com); dmarc=pass(p=none dis=none) header.from=nutanix.com ARC-Seal: i=2; a=rsa-sha256; t=1785315758; cv=pass; d=zohomail.com; s=zohoarc; b=OTyOiZNVs6e/x4GW77NQ6L0WxMVwIGHihddhfGWWtHzQgV2IqtO/sIg092qLilrXZEK9cC9lTVcN8mHt/dIqQEtCfvptTRM7z3ng5upaGHUDrym9PM3qbIVoNeMeGsYRV26TzuWQTEYK238kvBXzisxwEBt1Y3jP3hpG/3TDQdY= ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=zohomail.com; s=zohoarc; t=1785315758; h=Content-Type:Content-Transfer-Encoding:Cc:Cc:Date:Date:From:From:In-Reply-To:List-Subscribe:List-Post:List-Owner:List-Id:List-Archive:List-Help:List-Unsubscribe:MIME-Version:Message-ID:References:Subject:Subject:To:To:Message-Id:Reply-To; bh=r7y7pHtgCNS5DISAmPDjCPevDPMcW6y3s2c27/3Kd54=; b=IuMeUdyNYJPWNwVCCT+2weBq7+c8xT04vpwnxIaLl32VOH86w3UykrBYdYzAwDanQrAEjV+umvDv0iz0s39zBtZMGSihPW8PRKQUQtCc4iDKwvVRaaBEC0hC7L+Ob5fXllHXGFBbKxpBbNp07BLEnUieamN878hKGmI3+L43ij4= ARC-Authentication-Results: i=2; mx.zohomail.com; dkim=pass; spf=pass (zohomail.com: domain of lists.libvirt.org designates 38.145.34.151 as permitted sender) smtp.mailfrom=devel-bounces@lists.libvirt.org; arc=pass (i=1 dmarc=pass fromdomain=nutanix.com); dmarc=pass header.from= (p=none dis=none) Return-Path: Received: from lists.libvirt.org (lists.libvirt.org [38.145.34.151]) by mx.zohomail.com with SMTPS id 1785315758055830.3396926460154; Wed, 29 Jul 2026 02:02:38 -0700 (PDT) Received: by lists.libvirt.org (Postfix, from userid 993) id B4D3C41BB4; Wed, 29 Jul 2026 05:02:36 -0400 (EDT) Received: from [172.19.199.10] (unknown [10.16.107.18]) by lists.libvirt.org (Postfix) with ESMTP id A7E1541995; Wed, 29 Jul 2026 05:00:21 -0400 (EDT) Received: by lists.libvirt.org (Postfix, from userid 993) id 15CCA419E5; Wed, 29 Jul 2026 05:00:12 -0400 (EDT) Received: from mx0b-002c1b01.pphosted.com (mx0b-002c1b01.pphosted.com [148.163.155.12]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (3072 bits) server-digest SHA256) (No client certificate requested) by lists.libvirt.org (Postfix) with ESMTPS id 99BC741D3E for ; Wed, 29 Jul 2026 04:59:36 -0400 (EDT) Received: from pps.filterd (m0127841.ppops.net [127.0.0.1]) by mx0b-002c1b01.pphosted.com (8.18.1.11/8.18.1.11) with ESMTP id 66T7cCc82332798 for ; Wed, 29 Jul 2026 01:59:36 -0700 Received: from co1pr03cu002.outbound.protection.outlook.com (mail-westus2azon11020101.outbound.protection.outlook.com [52.101.46.101]) by mx0b-002c1b01.pphosted.com (PPS) with ESMTPS id 4fq2c7hg7m-1 (version=TLSv1.3 cipher=TLS_AES_256_GCM_SHA384 bits=256 verify=NOT) for ; Wed, 29 Jul 2026 01:59:35 -0700 (PDT) Received: from BN7PR02MB5329.namprd02.prod.outlook.com (2603:10b6:408:29::15) by PH0PR02MB11606.namprd02.prod.outlook.com (2603:10b6:510:3b9::9) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.270.12; Wed, 29 Jul 2026 08:59:33 +0000 Received: from BN7PR02MB5329.namprd02.prod.outlook.com ([fe80::a3e:7534:76c8:6715]) by BN7PR02MB5329.namprd02.prod.outlook.com ([fe80::a3e:7534:76c8:6715%4]) with mapi id 15.21.0270.009; Wed, 29 Jul 2026 08:59:33 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1 (2024-03-26) on lists.libvirt.org X-Spam-Level: X-Spam-Status: No, score=-5.0 required=5.0 tests=BAYES_00,DKIMWL_WL_HIGH, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,HEADER_FROM_DIFFERENT_DOMAINS, MAILING_LIST_MULTI,RCVD_IN_DNSWL_LOW,SPF_HELO_NONE autolearn=unavailable autolearn_force=no version=4.0.1 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nutanix.com; h= cc:content-transfer-encoding:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to; s= proofpoint20171006; bh=r7y7pHtgCNS5DISAmPDjCPevDPMcW6y3s2c27/3Kd 54=; b=LNFUAW0YXBhWTmi1ky2BgmZ7NVFzljmcy5zakzugT9DSbQB5v9cZM8yaD 838N90okBBB2MowaOjwCbMsfZWrBBeSe0AJ1J290oAqNo3OJWQwAgUAzvYDVmaYO oexioxYYN5WMx8qGJy49uLO2BSY9tCbmrNeQCXWUzt7cRLU4UTmVBPSo/EYvkUKN BRQYSEktzBYNcpy+rYa2rrffvXbmr95GD1YXOH1KRRH2jTfggWjLBibpKKOLB/nj AARfwotfQ9BVrjuLufxtG2tS3ZdYO2A1t0FJSvrk1Xj21I4c0MadtpDsK++zjE4+ FURZqjXS2bz9LoJnkDlmscf00A2vw== ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=DEMVujmvj5BMfT+tJAWuzRv7DQDcuwrPes9mXKFDdcu7S2V+4DrbFJjmamEJlpJ4hjkbxAgjUNp6pusTpyDB3q2Lmn3D05vPYk/qutGiCeDo7a0yeS2NKOlP9suq5U+/L4KSiKCNjNZT5S882OSKKEe8lRhr2fgMGpD1q0HS6Umj5+u++GwTWSVDBKBpoAooQHxGH8IoTBNF0uLPe21e3NXrMCRr4HsSdTksXrw81O6qOcdP4eok2b1uZUBZfemBjZGd1HauL5zne6oprxr89r6mBy3IDi5QjPfe+9fIMfqzam1edvOR8vW4LwwfHci/706uUrSt+mFHcFp4XLAPrg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=r7y7pHtgCNS5DISAmPDjCPevDPMcW6y3s2c27/3Kd54=; b=lNf1kKnEyJFRTQPEaIJUiRgue7dFkM8141o6IC8rHmqA0UhX/LiSNFT/F463Cv3J14WHO6+w8HgFiHGOtceCSf7ux4W4OjByZ8uQ7zfkO0w/6diW40sCf8+OfDu290HoWCAaWvx4RUnp3/hZRoyk7Nm3IA6apDWaZUatTxxF1eMgcP+rf9wl6YAtvf1b24m1IXfXprj3utRz3vxfuMjUjUlwLO42keYdaTMYlNDW2gAXfvB5Uv+IEl1m0LoofMYAJaz1ZhNCzud57tVzz7kpFpHBoJYNbwgjWOnQnNBbhkoYW3hBB+ymR/X+C2wfNEtz6iQmE/7nNiwnsPoG51+Icw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=nutanix.com; dmarc=pass action=none header.from=nutanix.com; dkim=pass header.d=nutanix.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nutanix.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=r7y7pHtgCNS5DISAmPDjCPevDPMcW6y3s2c27/3Kd54=; b=GPOJfDaYQZ0jR9oa9hT+BrzKtZzyDXIwnQ6RmSqV3GpR6sq0lwBMxoGm0rdx9tzJT74ZfKG3rKeIcaKD/EiXZhF9d5mTrsBqKH7mdE7XxDIqMHzcVIMdHoG/ZG5r6YJfA05o2stSlqa+YBGKwEMzKlQCMsGrcJ7oalibMP1gVlYI6LuPF6QGOCLCb+kbU9KCQMyQEWWcvGbfTIb7XHG+cam3J/GY0/90Eg84Mrvk1HQjdBOyV033rx4WXmn+jxtIo1oM/J6lz4KKCfjfuhVZ9DlAwavaovEEnoRKLj0J+Y5yZ3K0YlPe2LtDGxP7iCT8NP0haJ9BP1f4SLYxs5kZyQ== From: Abhisek Panda To: devel@lists.libvirt.org Subject: [PATCH v3 1/7] conf: Add a configuration param for TLS-PSK Date: Wed, 29 Jul 2026 08:58:53 +0000 Message-ID: <20260729085917.3243911-2-abhisek.panda1@nutanix.com> X-Mailer: git-send-email 2.43.7 In-Reply-To: <20260729085917.3243911-1-abhisek.panda1@nutanix.com> References: <20260729085917.3243911-1-abhisek.panda1@nutanix.com> Content-Transfer-Encoding: quoted-printable X-ClientProxiedBy: CY8PR02CA0011.namprd02.prod.outlook.com (2603:10b6:930:4d::6) To BN7PR02MB5329.namprd02.prod.outlook.com (2603:10b6:408:29::15) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: BN7PR02MB5329:EE_|PH0PR02MB11606:EE_ X-MS-Office365-Filtering-Correlation-Id: 59f81c14-e256-4aae-4efa-08deed4fb55e x-proofpoint-crosstenant: true X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|376014|366016|23010399003|1800799024|6133799003|3023799007|56012099006|18002099003|22082099003|10067099003; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:BN7PR02MB5329.namprd02.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(376014)(366016)(23010399003)(1800799024)(6133799003)(3023799007)(56012099006)(18002099003)(22082099003)(10067099003);DIR:OUT;SFP:1102; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?us-ascii?Q?VxKQlU4R5Q75unLBB3cIJvEliDrESQgZxtjkqFGyR6kejxTEbBqZ4nDUBTkR?= =?us-ascii?Q?fRjA7gSu6tFX/T9BhSuqL0QbctUQdFzc1zEPn9pHso9OFENPOlHJa3KnLcMh?= =?us-ascii?Q?ym+fABqFlca5O8oKJMB6ciQGcdndUzOFSd4c10BEDozCyOK7/9rlKysgMvog?= =?us-ascii?Q?18QdSHzWrlTqvSRKVQo7PndL1vWVdMOV0eqoCPVE982glsJJ+ZZfZtYj/KMv?= =?us-ascii?Q?eMnb6IHgvPwhHrBwdLhpQB8f+9y7sb3t/uPRboZQaJOtEkhRN/Mxc4gCxRhi?= =?us-ascii?Q?3RZM37vadDr+b0uLIOphmr7BjanMh1teC6V+2+TdcJGOTo6LHQRbYIjvnicC?= =?us-ascii?Q?70Lp5LgXC+hFfpMdQIFXuJQmwrApszt8xQfLvXR1cvl0v0kqGBtZTgHIDIXI?= =?us-ascii?Q?89X4KnGdOvnKnPNnHq+lijI6EW4JMubCYQgYWtJfW5AhTygq4M43Q+0CdFns?= =?us-ascii?Q?qDG21FUKy+e4K1osrDdyoUpi17YQshQYAw1aQXtN3dFQJl7+BNxefQyZ/p1H?= =?us-ascii?Q?53crZq4lOti9yHlbhnLaBMusp6kYR15ve+kZefmWQNlklnUF0xVOSGZIntUF?= =?us-ascii?Q?LIpstvlf2Na/+XqPlyxvodZps8Zi3KDrnyvCT6LairXdGzkOGRyiQqGahmWG?= =?us-ascii?Q?q5E0SrRZpJdbLdysIuR8C0/sbYCEsui8gmea9BUqhwYUTnosrRjloeoMqjqM?= =?us-ascii?Q?EwiHKal60HZGJ2ohwkg5phvBeSx2okZBrl2tEpMmF+joGJ1hO/OdzdZ+ZQrS?= =?us-ascii?Q?jWPRaFG3yqgLc1CwsTBgVjKZaKi3dd8ACuoTFPC6qD7VN7gJ3IuQGZMCpNxS?= =?us-ascii?Q?HVd73I9h0rPXxOnlnL+1j3MiDIDVNM4NQ2PZXV+ElocGz3wjRZC+JUoZ+/Hv?= =?us-ascii?Q?aDzyjXaxL4NQWpRBzjnKwDOVYUyYcF57IwxWsjXzJ+BetSFhOdnWyKTbYlZU?= =?us-ascii?Q?+ZIk+MJjuNKXA5RJi+Ii6o7R4RgQaHheWeS9geowuwdb6akOFjTOwW89aw0n?= =?us-ascii?Q?oTeHNbo1thmq9nC0dEGqlXIkCkYUKhvxFSgIU/w+bQfOXWX/Ge4B7WY/cC4w?= =?us-ascii?Q?v3sn5KUJVb01zXX0FQ0+PBihwMTfeDrmHo655LJROIWEPdHOuIabg8X8wlGq?= =?us-ascii?Q?4NheNbjoKl+miX7/NusvfZ4FKbn5TQ8ryZwAUAfhmpKdyIhMLoSChWZIGmr5?= =?us-ascii?Q?BrmkCUFJv8R4bF/d4R1XtwkJHBh7HQkJTsSgSRXeEOvoKiWkBIWTDMYnnYSU?= =?us-ascii?Q?+hinChgsVRzB0w+H2Xm5bteoFNcomDEGeRsJY0uMjViMn+ILCBjdycRAqKyb?= =?us-ascii?Q?uS5XDk3mHd5LVEMFEVuWyvUBzIfcT/SYTMruYy71ucbzoIHZA/vGn1bvpxRW?= =?us-ascii?Q?DgrWnWVy4dGaverUHTnTrDNOonQoum01eBwttqLfpOi3m1GRqPGOHDBMwXJW?= =?us-ascii?Q?PRpMZ429efK/WydgCZPCzzto8U4IPQaNrE2rNQAAPJM7Mwnp8L6qjeDcGcdM?= =?us-ascii?Q?Dfdjzxy2zcfiC6LZoWPfNZJXBKPgMn8uEIRdjcbR5fZ6JifK5/AycJHhZtAA?= =?us-ascii?Q?3jAEHoykJMt3Wd6eE4kza7/MVkniJQ+Rn5cfj/t1WCWd31YFSiFx7lrYhXy+?= =?us-ascii?Q?SdfTGQugzh7i2qxFmbpp0a5Zy9fZNIP0vqutudhyTImIB2UZPBRl9cizgZGO?= =?us-ascii?Q?1AURWx6GBx077rhxjQt4varMW4gus+K2Lr+94Ur2N0aMsSMGff83dXvwH9E2?= =?us-ascii?Q?OEq29sEZ/uzc8JKsW2A4bPY2xOX/ttc=3D?= X-Exchange-RoutingPolicyChecked: lp+84ukoyGDelVR14UBUOU3qXaukOH9eK67M0t6IvwdJTJ8GOb+Edjgdx7dirtu1DAab73VuFP1S+jvRbJ/979W176F0soTyo0/h7DJylEAEqoC/A6hZkF+Wu7SznkdUUw6NnhGfzcXdhJgpsW2F/21Mypz3zKa6WwCh5zxT/+yQ48aathCPOe0qlS/zcj2+OewxCS4Dr+AGJul+hIG2j5avaRMv1cdB7BzXSJzyz3/qwzqIIkf3OpAQbo8THD5FqEna4g3mHRmllyuDJZt6z8HiOHd4zsWFE7v2IiMsIARNgkHMDdBTShIV/MPwRCUIaddZ8Tj9Uu03TupAMxIn3w== X-OriginatorOrg: nutanix.com X-MS-Exchange-CrossTenant-Network-Message-Id: 59f81c14-e256-4aae-4efa-08deed4fb55e X-MS-Exchange-CrossTenant-AuthSource: BN7PR02MB5329.namprd02.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 29 Jul 2026 08:59:33.5102 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: bb047546-786f-4de1-bd75-24e5b6f79043 X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: +E0ESZWbT01Gp/FeHQQfAA04pZW4HtH9Qx2+xaKWmK1Y3ozPt6eCNeflf3ys78GnyFHeN/izSgxfq/i0fs6oyJb+1uqPkPJdzqJIvdRECG8= X-MS-Exchange-Transport-CrossTenantHeadersStamped: PH0PR02MB11606 X-Authority-Analysis: v=2.4 cv=SMBykuvH c=1 sm=1 tr=0 ts=6a69c0f7 cx=c_pps a=hSUXT6xmpWUQcPkODs04Ug==:117 a=6eWqkTHjU83fiwn7nKZWdM+Sl24=:19 a=z/mQ4Ysz8XfWz/Q5cLBRGdckG28=:19 a=lCpzRmAYbLLaTzLvsPZ7Mbvzbb8=:19 a=xqWC_Br6kY4A:10 a=RAioF0-LDSMA:10 a=0kUYKlekyDsA:10 a=VkNPw1HP01LnGYTKEx00:22 a=VofLwUrZ8Iiv6rRUPXIb:22 a=jxMXjlTPpCISP5mWtjnE:22 a=64Cc0HZtAAAA:8 a=-2AbmpwzriJMpJNtN8kA:9 X-Proofpoint-Spam-Info: AW1haW4tMjYwNzI5MDA3MyBTYWx0ZWRfXxNy6/hE2d0Hs dFLQSFCMzqWMDNs+3DkvwxK4oS1hF0MCq2nefxvECG72Uddy+IAZGZaTIXsy/inWtz1hF04U40Q AS+MN6EAXL4GyNhRcvBrGu/hQA+V0ds= X-Proofpoint-GUID: 77-uNyCnI2qRtsj0zZQhOweiXUVsux-b X-Proofpoint-ORIG-GUID: 77-uNyCnI2qRtsj0zZQhOweiXUVsux-b X-Proofpoint-Spam-Details-Enc: AW1haW4tMjYwNzI5MDA3MyBTYWx0ZWRfX0KSjC0aXhTNI eogwsfX8uE+HyaAKvhO8QzmdKfWXtl/F/KX4L31vyrpTct9YvJJRwuC06grdPYOAm5jygU39phe yQ7/dz5EgRDYJAlKoS+o9dcw5CG+0p7kjQ4DbqajHvf3uMYoMwZGiEr8tfsHu3OFB/9wSP50b2I voJSnYlW6VX38rHdCCIm+xy6EvQ1GnvQLngC/rxXPAcAKrHNDF7W92lJUXvOx1h0ePAUIlXBSx0 hAx7Vw9kw/XNL88U8o4mFSFI5GS3Wss/tLdphtSVtuDynbVYfHZFHW3jHVeL/6u0y8jGp3Lewe6 wBECuz7ZfK58qfIzR489/nZosBax9u1C57subGTXe2lphEV+iMGiTU2yaYQ+rwUZ83TPHEgYOXh nJWbi/Kmm64ciuKoyWigyl38BC3ErHqdIlDEMwO6uOMBeuaIV5ESx4w6aJPp4WLsJn5SkY6FlHU KZWGJtPA29O3amYrfmQ== X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.293,Aquarius:18.0.1143,Hydra:6.1.134,FMLib:17.12.100.49 definitions=2026-07-29_03,2026-07-28_02,2025-10-01_01 X-Proofpoint-Spam-Reason: safe Message-ID-Hash: HFJXLOUQ4M7H634G57ITRAUFJ3OPOBDK X-Message-ID-Hash: HFJXLOUQ4M7H634G57ITRAUFJ3OPOBDK X-MailFrom: abhisek.panda1@nutanix.com X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; header-match-devel.lists.libvirt.org-0; emergency; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header CC: tejus.gk@nutanix.com, mark.caveayland@nutanix.com, Abhisek Panda X-Mailman-Version: 3.3.10 Precedence: list List-Id: Development discussions about the libvirt library & tools Archived-At: List-Archive: List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: X-ZohoMail-DKIM: pass (identity @nutanix.com) X-ZM-MESSAGEID: 1785315758853158500 Content-Type: text/plain; charset="utf-8" For encrypted migration of VMs, QEMU provides the TLS-PSK authentication apart from TLS certificates. This mechanism relies on pre-shared keys (a secret key that is known to both sender and receiver prior to secure communication) for providing secure transfer of data. Libvirt handles the lifecycle of pre-shared keys, managing their generation, persistent storage, and cleanup. Add the "migrate_tls_psk_length" configuration attribute to qemu.conf to allow users to define the size of the pre-shared key. Signed-off-by: Abhisek Panda Reviewed-by: Peter Krempa --- src/qemu/libvirtd_qemu.aug | 1 + src/qemu/qemu.conf.in | 8 ++++++++ src/qemu/qemu_conf.c | 18 ++++++++++++++++++ src/qemu/qemu_conf.h | 1 + src/qemu/test_libvirtd_qemu.aug.in | 1 + 5 files changed, 29 insertions(+) diff --git a/src/qemu/libvirtd_qemu.aug b/src/qemu/libvirtd_qemu.aug index 311992e441..d58f995282 100644 --- a/src/qemu/libvirtd_qemu.aug +++ b/src/qemu/libvirtd_qemu.aug @@ -68,6 +68,7 @@ module Libvirtd_qemu =3D | str_entry "migrate_tls_x509_secret_uuid" | str_entry "migrate_tls_priority" | bool_entry "migrate_tls_force" + | int_entry "migrate_tls_psk_length" =20 let backup_entry =3D str_entry "backup_tls_x509_cert_dir" | bool_entry "backup_tls_x509_verify" diff --git a/src/qemu/qemu.conf.in b/src/qemu/qemu.conf.in index 97b0141cf6..7f36bd1a68 100644 --- a/src/qemu/qemu.conf.in +++ b/src/qemu/qemu.conf.in @@ -437,6 +437,14 @@ #migrate_tls_force =3D 0 =20 =20 +# The TLS-PSK authentication relies on pre-shared keys for providing secur= e transfer of data. +# When TLS-PSK is enabled for the migration operation, Libvirt manages the= lifecycle of the +# pre-shared key files. For the key generation process, users can specify = the pre-shared +# key size in bytes. The default value is set to 32 bytes. +# +#migrate_tls_psk_length =3D 32 + + # In order to override the default TLS certificate location for backup NBD # server certificates, supply a valid path to the certificate directory. I= f the # provided path does not exist, libvirtd will fail to start. If the path is diff --git a/src/qemu/qemu_conf.c b/src/qemu/qemu_conf.c index e30b146634..986f01ddcd 100644 --- a/src/qemu/qemu_conf.c +++ b/src/qemu/qemu_conf.c @@ -77,6 +77,9 @@ VIR_LOG_INIT("qemu.qemu_conf"); #define QEMU_BACKUP_PORT_MIN 10809 #define QEMU_BACKUP_PORT_MAX 10872 =20 +#define QEMU_MIGRATE_TLS_PSK_LENGTH 32 +#define QEMU_MIGRATE_TLS_PSK_LENGTH_MAX 512 + VIR_ENUM_IMPL(virQEMUSchedCore, QEMU_SCHED_CORE_LAST, "none", @@ -616,6 +619,17 @@ virQEMUDriverConfigLoadSpecificTLSEntry(virQEMUDriverC= onfig *cfg, =20 #undef GET_CONFIG_TLS_CERTINFO_COMMON #undef GET_CONFIG_TLS_CERTINFO_SERVER + + if (virConfGetValueUInt(conf, "migrate_tls_psk_length", &cfg->migrateT= LSPSKLength) < 0) + return -1; + + if (cfg->migrateTLSPSKLength > QEMU_MIGRATE_TLS_PSK_LENGTH_MAX) { + virReportError(VIR_ERR_CONF_SYNTAX, + _("migrate_tls_psk_length must not be greater than = %1$d"), + QEMU_MIGRATE_TLS_PSK_LENGTH_MAX); + return -1; + } + return 0; } =20 @@ -1594,6 +1608,10 @@ virQEMUDriverConfigSetDefaults(virQEMUDriverConfig *= cfg) =20 #undef SET_TLS_VERIFY_DEFAULT =20 + if (cfg->migrateTLSPSKLength =3D=3D 0) { + cfg->migrateTLSPSKLength =3D QEMU_MIGRATE_TLS_PSK_LENGTH; + } + return 0; } =20 diff --git a/src/qemu/qemu_conf.h b/src/qemu/qemu_conf.h index 1d29f35c5d..c18aedf59c 100644 --- a/src/qemu/qemu_conf.h +++ b/src/qemu/qemu_conf.h @@ -170,6 +170,7 @@ struct _virQEMUDriverConfig { char *migrateTLSx509secretUUID; char *migrateTLSpriority; bool migrateTLSForce; + unsigned int migrateTLSPSKLength; =20 char *backupTLSx509certdir; bool backupTLSx509verify; diff --git a/src/qemu/test_libvirtd_qemu.aug.in b/src/qemu/test_libvirtd_qe= mu.aug.in index c4cf9cf634..7e337825fd 100644 --- a/src/qemu/test_libvirtd_qemu.aug.in +++ b/src/qemu/test_libvirtd_qemu.aug.in @@ -45,6 +45,7 @@ module Test_libvirtd_qemu =3D { "migrate_tls_x509_secret_uuid" =3D "00000000-0000-0000-0000-000000000000= " } { "migrate_tls_priority" =3D "@SYSTEM" } { "migrate_tls_force" =3D "0" } +{ "migrate_tls_psk_length" =3D "32" } { "backup_tls_x509_cert_dir" =3D "/etc/pki/libvirt-backup" } { "backup_tls_x509_verify" =3D "1" } { "backup_tls_x509_secret_uuid" =3D "00000000-0000-0000-0000-000000000000"= } --=20 2.43.7