From nobody Wed Sep 23 00:42:59 2026 Delivered-To: importer@patchew.org Received-SPF: pass (zohomail.com: domain of lists.libvirt.org designates 38.145.34.151 as permitted sender) client-ip=38.145.34.151; envelope-from=devel-bounces@lists.libvirt.org; helo=lists.libvirt.org; Authentication-Results: mx.zohomail.com; dkim=pass; spf=pass (zohomail.com: domain of lists.libvirt.org designates 38.145.34.151 as permitted sender) smtp.mailfrom=devel-bounces@lists.libvirt.org; arc=pass (i=1 dmarc=pass fromdomain=nutanix.com); dmarc=pass(p=none dis=none) header.from=nutanix.com ARC-Seal: i=2; a=rsa-sha256; t=1785315927; cv=pass; d=zohomail.com; s=zohoarc; b=jQICFVks2mMu+bwRv+NcuJlNu7OBUgsoDTeO4lTosrjJcQDm8pk1vdxKZIWcUBzquOJcXJvbmZVvUf0WqIRb+AyjDmOplMfFzFLvrfp5JK32GgivMfrkQSvzqXQqHsMVArLK3f32+BTIiHuYEQxJg3baz8aMAnQH1Bj8LKCF1rs= ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=zohomail.com; s=zohoarc; t=1785315927; h=Content-Type:Content-Transfer-Encoding:Cc:Cc:Date:Date:From:From:In-Reply-To:List-Subscribe:List-Post:List-Owner:List-Id:List-Archive:List-Help:List-Unsubscribe:MIME-Version:Message-ID:References:Subject:Subject:To:To:Message-Id:Reply-To; bh=OI4KCXIowfTldCa7EDOI9ojBsuRK7x/cJkJPcryENWA=; b=MdztBT6jVaK/b4N5/Bx2cLCKRExeLtS/Ha7EWvCOHbWXxkyLRcOFkoSU7IVAmyX4c0If2Wdr/OVvqGbDdvpdN44LkQPyYJ6hyyWxVazvX5aFawovIm7W7SUBs8DHJviZfNPHfniCwNPRDn/0TxoNdmaRhD3IU8hrg0L/HkeOUvM= ARC-Authentication-Results: i=2; mx.zohomail.com; dkim=pass; spf=pass (zohomail.com: domain of lists.libvirt.org designates 38.145.34.151 as permitted sender) smtp.mailfrom=devel-bounces@lists.libvirt.org; arc=pass (i=1 dmarc=pass fromdomain=nutanix.com); dmarc=pass header.from= (p=none dis=none) Return-Path: Received: from lists.libvirt.org (lists.libvirt.org [38.145.34.151]) by mx.zohomail.com with SMTPS id 1785315927135914.9344699432763; Wed, 29 Jul 2026 02:05:27 -0700 (PDT) Received: by lists.libvirt.org (Postfix, from userid 993) id 01D0C3F94D; Wed, 29 Jul 2026 05:05:25 -0400 (EDT) Received: from [172.19.199.10] (unknown [10.16.107.18]) by lists.libvirt.org (Postfix) with ESMTP id 847F841E39; Wed, 29 Jul 2026 05:01:22 -0400 (EDT) Received: by lists.libvirt.org (Postfix, from userid 993) id ADE424190F; Wed, 29 Jul 2026 05:01:00 -0400 (EDT) Received: from mx0a-002c1b01.pphosted.com (mx0a-002c1b01.pphosted.com [148.163.151.68]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (3072 bits) server-digest SHA256) (No client certificate requested) by lists.libvirt.org (Postfix) with ESMTPS id B0FE941C9C for ; Wed, 29 Jul 2026 04:59:51 -0400 (EDT) Received: from pps.filterd (m0127840.ppops.net [127.0.0.1]) by mx0a-002c1b01.pphosted.com (8.18.1.11/8.18.1.11) with ESMTP id 66T7e8JA2080533 for ; Wed, 29 Jul 2026 01:59:50 -0700 Received: from sn4pr2101cu001.outbound.protection.outlook.com (mail-southcentralusazon11022095.outbound.protection.outlook.com [40.93.195.95]) by mx0a-002c1b01.pphosted.com (PPS) with ESMTPS id 4fpy74t38h-1 (version=TLSv1.3 cipher=TLS_AES_256_GCM_SHA384 bits=256 verify=NOT) for ; Wed, 29 Jul 2026 01:59:50 -0700 (PDT) Received: from BN7PR02MB5329.namprd02.prod.outlook.com (2603:10b6:408:29::15) by PH0PR02MB11606.namprd02.prod.outlook.com (2603:10b6:510:3b9::9) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.270.12; Wed, 29 Jul 2026 08:59:49 +0000 Received: from BN7PR02MB5329.namprd02.prod.outlook.com ([fe80::a3e:7534:76c8:6715]) by BN7PR02MB5329.namprd02.prod.outlook.com ([fe80::a3e:7534:76c8:6715%4]) with mapi id 15.21.0270.009; Wed, 29 Jul 2026 08:59:49 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1 (2024-03-26) on lists.libvirt.org X-Spam-Level: X-Spam-Status: No, score=-5.0 required=5.0 tests=BAYES_00,DKIMWL_WL_HIGH, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,HEADER_FROM_DIFFERENT_DOMAINS, MAILING_LIST_MULTI,RCVD_IN_DNSWL_LOW,SPF_HELO_NONE autolearn=unavailable autolearn_force=no version=4.0.1 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nutanix.com; h= cc:content-transfer-encoding:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to; s= proofpoint20171006; bh=OI4KCXIowfTldCa7EDOI9ojBsuRK7x/cJkJPcryEN WA=; b=KwIZB6YJryzy60Lz4hqhYpT8Z6usUe0cS4eHbj+Rstbpyt1KgO7Jy0myB //6sPDKjvLMZOfrYdNC12YyJ52g9cbmIjvGkr3Doz17l9PRjHkQCPuyw1WwD+91z Hbfq0XjXYd0AFZWkujYb67TV3bqguoBxEyRrnBR+ZTy4VeJ8JHKaYZ+JswMiRN3f Dt0hLHnBaz81Ax5c7ZudEuVj2u7wIp1dBOk/AJFCl7czsB4VxQ3EHpI9OZf/+2Bq N+ZaUFkrChSf3E0m2AQ5ZPvF4LYOa2v1llmuZVd28G+UArDMdWDH7CNNqOhfc1GP Mqd9brd+9B/p9XQA8uWGXIpWHdgXw== ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=jy2UOY/T943HM2O+ZXfpYfrkQchD0PnoSw7uQ8LFFeTFe0c1kMfqd+ohaWeIEiVHgjYNGbWF5qQWI+shdlnU0jPiW2Ig6h8/lIImLJT7VT62lVNrGDSZwotEa0mo5n7fHq3ap92ELK41QzMayt65P2TlrqB/YB/NhkUXD+L0VnTNyM5wFLStpYLqNfdvLRSE6jfp0g8jL/egK5YdfLE4Wo2ZUA/ZdJa0q6B7lHaLlREEZVkS1Kedqk/fjYBhAspB11JR5hxVMSL+KPeJ0j6/anBg1EvbJLGbfYW/o1JQUWONnacAzFHjtY7uxGacLrh2n5YxOUROymRX3wYNFhh2Tw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=OI4KCXIowfTldCa7EDOI9ojBsuRK7x/cJkJPcryENWA=; b=mv9ihHRxaYwCrP31cm6b5sAc0viMIknLIMx79OgPx2MFGspnHoTQTKRWTanC+MucRYNae8oHU0C1dnfxr4xi9qFcb+am/8pYuEeQyXR9lKJ3kc4pDOd4bjOT+se0X4DBKK4xB2TTrCsq0I3uzOH8MtCOlFt44nMb5NV2BTHwlQdzVIaS8aCPm2Ex1X2uOAUguhbZzsjsn0/NP4qn2HLwGnJmn6yCp4HIjk0P7E8N11HJC2xMrhsCcC2WvUOpU0eu0P6X/ZYJybVxR79KQ4OmMHRUEh4ntpPS1II5PuVW1PjZ3U0yMZSQrnC8jShfFHFZAod8krxoeve/ZCUfJpwH7A== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=nutanix.com; dmarc=pass action=none header.from=nutanix.com; dkim=pass header.d=nutanix.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nutanix.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=OI4KCXIowfTldCa7EDOI9ojBsuRK7x/cJkJPcryENWA=; b=ls6INwwBXyvWCzl9r6SKyFwMEibceOBUz8sXMoq1q1V6/NCtb12MzHEhUVW0LuLAbGXm6oxto4LMQHYrpWx/iGI4RnHaAS3eqLTJQIdiH76cy3FryhjagZqygFg0gp7dQ9MlLjVY2i3So5EA5b2mniZXNeJkGjFOiQ0MfvggRf/WSo3EpUZ8dBS+rjS2ANhCzfjyc/a1YlfYSk+DhLLadKO6ByGyKkmNE8qhj/99w+DMrukXKYYHEijMHdvXIaznCoaP7rdtEPk648TquPuUQ790HffjM1goJ0q+yU7V5u3mC9UHtk5xvy3hLPk4swWL8JRbmkIyLFjtadSFliszDw== From: Abhisek Panda To: devel@lists.libvirt.org Subject: [PATCH v3 5/7] qemu: Manage tls-creds-psk object lifecycle Date: Wed, 29 Jul 2026 08:58:57 +0000 Message-ID: <20260729085917.3243911-6-abhisek.panda1@nutanix.com> X-Mailer: git-send-email 2.43.7 In-Reply-To: <20260729085917.3243911-1-abhisek.panda1@nutanix.com> References: <20260729085917.3243911-1-abhisek.panda1@nutanix.com> Content-Transfer-Encoding: quoted-printable X-ClientProxiedBy: CY5PR22CA0100.namprd22.prod.outlook.com (2603:10b6:930:65::28) To BN7PR02MB5329.namprd02.prod.outlook.com (2603:10b6:408:29::15) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: BN7PR02MB5329:EE_|PH0PR02MB11606:EE_ X-MS-Office365-Filtering-Correlation-Id: 1cb983de-4969-4e11-2c7f-08deed4fbe99 x-proofpoint-crosstenant: true X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|376014|366016|23010399003|1800799024|3023799007|56012099006|18002099003|22082099003|10067099003; X-Microsoft-Antispam-Message-Info: ZLPbK41xBWcJXFBg2fqdnxrRgYviW7EmQNoJS7Fxq8qxnYAlj4LDPr14iXCKKN7B364xvO3DhsY3PqS3shksTEKBCM66PFcn9VVLGACL0aV4kO+2r9WZ6ssWrDMZNrkkec8P3ZUugVs0lihsSSjp9nbn14VQ/SIUzqgeeW5jwycH6la/gXfyzWeCP9HLxUqNGm4lSMYIz2dBMdMBP1B959qdjwh8EJJ2671B0jbEyzZgrdH38DW6bKwTc25sn30IdPPlBBcg8yRSMK3K0Et+XZCPqoDL6iGoe2dBURrSPi0jTvmLNt8CuQ2xf40YbIcz+R1TUM5wLMcpkEVuCSar/9mHQKOVfsYRrD/MmIYsqXr6Qld4NYr7+dZIJY9NujPWoHrAjDoX3iow/T9AqCTgdbVlaK6lmSh/kzknQneTMcL2Yx4FCy7gpsOC9LAcN9yS1PJ31rKc3sZefwtGMIbCP3VItFq1oE4RB39EcLFxe1tw2NKxxlIedj7H6L6SMZCRgvzUAQwkyw9y9wC5R9h1XByTo9Fj0X5QqGbZiKUiYkog+jbNKbb9A7vKyI4M4n9YOAJPOYjO3zS4JIgEKbSNFEPTxW1Rn9Ygk7ogTnUfbmpMfJfGFxx3aRLpSq8N3ljukeYifgCgDUA0+SSaiVd4+W6qC6/FzM83TAxks7zSckY= X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:BN7PR02MB5329.namprd02.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(376014)(366016)(23010399003)(1800799024)(3023799007)(56012099006)(18002099003)(22082099003)(10067099003);DIR:OUT;SFP:1102; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?us-ascii?Q?IFI0GFAwu/P5PAJG+AIXQc88ZOTp5dnnZ4YnoXQhxShMbaAdfr7NCvWqvQKj?= =?us-ascii?Q?oyZCDwtnsMiWgMb0mKL2k19ckywmQ4Udmw/b9gBKMTmoZzRVw1hoMEM4pfgY?= =?us-ascii?Q?OpxymEIamAuTOEHssLFz+dGuIUXz3FvXwZJat7wX+/3beZAMe+yxhdWFDcSO?= =?us-ascii?Q?K7UbprEcUY5b+rS51nvpAK+qQ4DYT1m9D+vPt4FNkKP0QCY/PEybPAVHaaeF?= =?us-ascii?Q?dVKcWhi3rtEBX7Estk/FPvmzh3VPz51p/m3ENEH8WekMe1CMcl2UQWAcwCSQ?= =?us-ascii?Q?THBxEytN24Zm5eFsnArC/s9kVC73xsJbiE24KNV1p1Smhwt70pGyKcr/AGbU?= =?us-ascii?Q?y288/vqorBkCir7j5yz/mRP9tHXwVdwTGaD5HtZMuslAHhpd2v/8687DDUxR?= =?us-ascii?Q?x/sF/1pa5C3pOimPk3EGI6vWwuZXe++lqH9dYR0pjryi5G833DEW5sOU777f?= =?us-ascii?Q?NNFKh6kZYXPXme7c9pX4rNiwhsZX+q8H2071aHdLfKBaHqn9HRuvhy9eymra?= =?us-ascii?Q?dI+QLEe3JHG5TSdjIa8dxyPtosmrVf33209ukuB60c+8MfGdrlvq9fkz/Yeo?= =?us-ascii?Q?q2U7QNGTyLsihcWjNtkOLkhQ6xmdsaPFMGq+U5A8GRCFKGHs9zWDHa9Ehlyw?= =?us-ascii?Q?FVhvZjhk8OWjMhserhpUSeflKuIlkcKDD9VIGg2fb1/N7fOBpT2vU68F7Rdq?= =?us-ascii?Q?658IAICb5Koc/PjOiuAq8yNGe8ehPwFU/fPhAVtd06PGKN9apBxosBLc+DDV?= =?us-ascii?Q?V1nMTybOF50/NjgTLk9mLrrezwYPO3DbOAy5RE0JuYfkGesnAr9sPW17Mc0s?= =?us-ascii?Q?HU8tGK6Mg+/4IVbk3yUz4lI8WYpLbrvImk6QXFPZyvLAh5Ncx+H4Tw2RUBSA?= =?us-ascii?Q?BW5kF1JN3kpQTpGeGdoq/JPvZPa5W0OjvM8ZU2T2RE73/sIH1r/mBcwIzwli?= =?us-ascii?Q?RKe8DIEPbGHn6JvWAuaihTpiOPP4N9UoQG9aqKGa+Px4Iw0aYELaE4OrQELt?= =?us-ascii?Q?jqA5quDVvo2km3F4SPhDU3qzCxRSR+2YjAbpD6RfZF4s7O9Uhc9q2jN1q0Aw?= =?us-ascii?Q?GJhyaJdikRpOQidDKAEiA17FX/v+9KcipCtA40ZBkX/XZ3LYmzyczD+yZh8o?= =?us-ascii?Q?p0QXKX6U8dTu6ZxAAwOIU0UF6l3NkJVql5r1nGL19FMkmzuulafEFneNV77q?= =?us-ascii?Q?SwVIw/hz/md8X6/jRHn8MENAEP+QATm2noB09tGQxOfYFJLbiaqNmVRa5S0M?= =?us-ascii?Q?XuoLRRcJQ/Kg8Fj2jP7ep/9oqeuNmsEhgPPDBOmDiTtaieJtRweBe3SDDpov?= =?us-ascii?Q?7ENYqFP1Xv4CqMi5XhjsKxNLtmrv9iUzwT4WUA68PX0uocONNmUayoZ881/z?= =?us-ascii?Q?eJavMrQaBXe9Rb24jt9AxAtvsyAlhLa8VtrtfiglaeeKWwrF8qNJM+3qfah6?= =?us-ascii?Q?x5bONoeTWHZ2mFUmqs+Lmh6C7J9Tm60sfw2mgYVQTHRUOAdyGs0ef6UF38/b?= =?us-ascii?Q?5RPvu1+hYyWDeEjo2d1Kwmkg4Uewhc+WwA4GcpD9XCaCUb7XG54MwuyKrAov?= =?us-ascii?Q?iJxIMMgrXXVT7+THzGz/99OjHtEHLjabRpNGNk+p7D0QG7+Gvjxy/O4engs2?= =?us-ascii?Q?V53/RaW3RRsaG+nOKH0xiuqPFKqopoH6fSIaYYDngQw46x6qhFlr7jN+D+di?= =?us-ascii?Q?MhFsPwzGaq15DK1UNWmSmK+n+brEbkzcDc1anDvTWUgBC3Z8iReDmKR54gPz?= =?us-ascii?Q?2huMvs2tnCCd9EJwc/lC9Zw0krO9nho=3D?= X-Exchange-RoutingPolicyChecked: qOz33mm/IBnEtK5vTXo67PZ4wiB9d6MCDS7JXC2K6VhYVJipyTOQSDzF7xxnFp+BvkSueIBOMDHQXc4xF63v8OOFcOX0/8E9c6q4VUnFLu7ttzkJB16XqNNniC42J+cYMSCP6lmWvg/CIPnIaobIbYRnxzRCD9RiIHSY1s7uE2wwLOUdKvPwVaKRcQ2pw8V2FLV4EMTxk4H8p2M0L2SHG2HuyhTsPK9n3XyP02RNj7DujrFiOUIrRE+i32ypNsFQC7tYLOiuEJiaSp9CgnPjh9D5RyCtYxivUzuHgsg3ZqrcBep7l9rXWLD2MzB8gMHKImmzQ6hbOeekscSdY6bIlg== X-OriginatorOrg: nutanix.com X-MS-Exchange-CrossTenant-Network-Message-Id: 1cb983de-4969-4e11-2c7f-08deed4fbe99 X-MS-Exchange-CrossTenant-AuthSource: BN7PR02MB5329.namprd02.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 29 Jul 2026 08:59:48.9821 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: bb047546-786f-4de1-bd75-24e5b6f79043 X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: bpU6W5BQtPzWxPYy8MUBqHgiKMxtvDoE5KGqc3eniQN0GPm86mZbV9rjlA6zuqdGTL1Tbo04SahRqU22dm6nMXDpyfVhdwSIScpvuZ7Mv6k= X-MS-Exchange-Transport-CrossTenantHeadersStamped: PH0PR02MB11606 X-Proofpoint-ORIG-GUID: gmT7rqe2I6qsNdj3kWpgpqibYEUhmrgy X-Proofpoint-Spam-Info: AW1haW4tMjYwNzI5MDA3MyBTYWx0ZWRfX1r0Kc1Iip3mv dhz+e4Qvejqky4oQD4umXWXiuXcCJE1a2OdcM2jEkqoJQ6t4vSLbTCubd+GmZaCm8h7wO3d1QVM 4GYg2f7cvVsxFVMeII1Tt4ggb2mnpdw= X-Authority-Analysis: v=2.4 cv=UIzt2ify c=1 sm=1 tr=0 ts=6a69c106 cx=c_pps a=ZO9zLbrfvwitr87ojz3Jng==:117 a=6eWqkTHjU83fiwn7nKZWdM+Sl24=:19 a=z/mQ4Ysz8XfWz/Q5cLBRGdckG28=:19 a=lCpzRmAYbLLaTzLvsPZ7Mbvzbb8=:19 a=xqWC_Br6kY4A:10 a=RAioF0-LDSMA:10 a=0kUYKlekyDsA:10 a=VkNPw1HP01LnGYTKEx00:22 a=VofLwUrZ8Iiv6rRUPXIb:22 a=_-M8LpHI31CeLmyZm6wg:22 a=64Cc0HZtAAAA:8 a=FkoMf_KoTue4cd8-psAA:9 X-Proofpoint-Spam-Details-Enc: AW1haW4tMjYwNzI5MDA3MyBTYWx0ZWRfX1IdorzhJYFu2 SZcX2LgHf3H2h8T757woKB1D4Dy4Fv2u0xgNVOBMcIN32YxuBd18Gc3p6gfr5i/nqSPbkQgvctb kdqVBGF13LQmhT6rjeMVlrTz/y9V0d4Aq5y4aaRDhF4D5NYaTwOEKvzgrjXyaLdeUnb9CmAuzMI 4Z0v1TxBdZI0+ZsweEFa7X98kFzJ5W5tWZQ3mJ8VgNGtQ/9FQJXTbmvfKJPR2aQRjAojR1i6GUk QQo8/Wz3OEpbg0OIs6w1KOoHLHtATZwZ5UyQkpjD6kQ08uH9xrCw7A3tpoEBEMVlZBl2ZkODb6a r2FCfILpMdr94yGYOpLcPXDHhzU8uKiGAhxgsZ8omIKIntomtTl9HVusdC6wnWLXIfgYHB8kiXB baxQ03d2tmShCH55lQz1ziOdkGC47ay1K5bXv/iEkc5pEJET5EspivkJFz1wrKOMgHYS0VrJfyZ Eqr1BW+D00TYInxC3gA== X-Proofpoint-GUID: gmT7rqe2I6qsNdj3kWpgpqibYEUhmrgy X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.293,Aquarius:18.0.1143,Hydra:6.1.134,FMLib:17.12.100.49 definitions=2026-07-29_03,2026-07-28_02,2025-10-01_01 X-Proofpoint-Spam-Reason: safe Message-ID-Hash: 42NTTCJK47WWZ3DVGTKZHLJHTJUG3LV7 X-Message-ID-Hash: 42NTTCJK47WWZ3DVGTKZHLJHTJUG3LV7 X-MailFrom: abhisek.panda1@nutanix.com X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; header-match-devel.lists.libvirt.org-0; emergency; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header CC: tejus.gk@nutanix.com, mark.caveayland@nutanix.com, Abhisek Panda X-Mailman-Version: 3.3.10 Precedence: list List-Id: Development discussions about the libvirt library & tools Archived-At: List-Archive: List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: X-ZohoMail-DKIM: pass (identity @nutanix.com) X-ZM-MESSAGEID: 1785315928801158500 Content-Type: text/plain; charset="utf-8" To enable TLS-PSK-based authentication scheme, add support for instantiating the tls-creds-psk object through QEMU monitor. Suggested-by: Tejus GK Signed-off-by: Abhisek Panda Reviewed-by: Peter Krempa --- src/qemu/qemu_migration_params.c | 66 ++++++++++++++++++++++++++++++++ src/qemu/qemu_migration_params.h | 8 ++++ 2 files changed, 74 insertions(+) diff --git a/src/qemu/qemu_migration_params.c b/src/qemu/qemu_migration_par= ams.c index d551ab9216..129f6540ec 100644 --- a/src/qemu/qemu_migration_params.c +++ b/src/qemu/qemu_migration_params.c @@ -31,6 +31,7 @@ #define LIBVIRT_QEMU_MIGRATION_PARAMSPRIV_H_ALLOW #include "qemu_migration_paramspriv.h" #include "qemu_monitor.h" +#include "qemu_command.h" =20 #define VIR_FROM_THIS VIR_FROM_QEMU =20 @@ -1237,6 +1238,71 @@ qemuMigrationParamsEnableTLSx509(virQEMUDriver *driv= er, } =20 =20 +/* qemuMigrationParamsEnableTLSPSK + * @driver: pointer to qemu driver + * @vm: domain object + * @tlsListen: server or client + * @asyncJob: Migration job to join + * @tlsPSKAlias: alias to be generated for TLS-PSK object + * @migParams: migration parameters to set + * + * Create the TLS PSK objects for the migration and set the migParams valu= e. + * + * Returns 0 on success, -1 on failure + */ +int +qemuMigrationParamsEnableTLSPSK(virQEMUDriver *driver, + virDomainObj *vm, + bool tlsListen, + int asyncJob, + char **tlsAlias, + qemuMigrationParams *migParams) +{ + qemuDomainObjPrivate *priv =3D vm->privateData; + g_autoptr(virJSONValue) tlsPSKProps =3D NULL; + g_autoptr(virQEMUDriverConfig) cfg =3D virQEMUDriverGetConfig(driver); + g_autofree char *key_dir_path =3D NULL; + g_autofree char *shortName =3D NULL; + virErrorPtr orig_err =3D NULL; + + if (!vm || !vm->def || !(shortName =3D virDomainDefGetShortName(vm->de= f))) + return -1; + + key_dir_path =3D g_strdup_printf("%s/%s", cfg->tlsPSKStateDir, shortNa= me); + + if (!(*tlsAlias =3D qemuAliasTLSObjFromSrcAlias(QEMU_MIGRATION_TLS_ALI= AS_BASE))) + return -1; + + if (qemuBuildTLSPSKBackendProps(key_dir_path, tlsListen, *tlsAlias, &t= lsPSKProps) < 0) + return -1; + + /* Ensure the domain doesn't already have the TLS-PSK objects defined. + * This should prevent any issues just in case some cleanup wasn't + * properly completed (both src and dst use the same alias) or + * some other error path. */ + qemuDomainDelTLSObjects(vm, asyncJob, NULL, *tlsAlias); + + + /* Add the tls-creds-psk object to QEMU */ + if (qemuDomainObjEnterMonitorAsync(vm, asyncJob) < 0) + return -1; + + if (qemuMonitorAddObject(priv->mon, &tlsPSKProps, NULL) < 0) { + virErrorPreserveLast(&orig_err); + qemuDomainObjExitMonitor(vm); + virErrorRestore(&orig_err); + return -1; + } + qemuDomainObjExitMonitor(vm); + + if (qemuMigrationParamsSetString(migParams, QEMU_MIGRATION_PARAM_TLS_C= REDS, + *tlsAlias) < 0) + return -1; + + return 0; +} + + /* qemuMigrationParamsDisableTLS * @vm: domain object * @migParams: Pointer to a migration parameters block diff --git a/src/qemu/qemu_migration_params.h b/src/qemu/qemu_migration_par= ams.h index 14e20fb71e..8774b4596c 100644 --- a/src/qemu/qemu_migration_params.h +++ b/src/qemu/qemu_migration_params.h @@ -123,6 +123,14 @@ qemuMigrationParamsEnableTLSx509(virQEMUDriver *driver, const char *hostname, qemuMigrationParams *migParams); =20 +int +qemuMigrationParamsEnableTLSPSK(virQEMUDriver *driver, + virDomainObj *vm, + bool tlsListen, + int asyncJob, + char **tlsAlias, + qemuMigrationParams *migParams); + int qemuMigrationParamsDisableTLS(virDomainObj *vm, qemuMigrationParams *migParams); --=20 2.43.7