qemu: Enable client TLS certificate validation by default for chardev, migration, and backup servers

[PATCH 0/6] qemu: Enable client TLS certificate validation by default for chardev, migration, and backup servers

Peter Krempa posted 6 patches 5 years, 2 months ago

Download series mbox

Test syntax-check failed

Patches applied successfully (tree, apply log)
git fetch https://github.com/patchew-project/libvirt tags/patchew/cover.1605279624.git.pkrempa@redhat.com

NEWS.rst             | 11 +++++++++++
src/qemu/qemu.conf   | 18 ++++++++++++++----
src/qemu/qemu_conf.c | 22 ++++++++++++++--------
src/qemu/qemu_conf.h |  1 +
4 files changed, 40 insertions(+), 12 deletions(-)

Expand all Fold all

[PATCH 0/6] qemu: Enable client TLS certificate validation by default for chardev, migration, and backup servers

Posted by Peter Krempa 5 years, 2 months ago

See patches 6 for a explanation.

Peter Krempa (6):
  qemu: conf: Allow individual control of default value for
    *_tls_x509_verify
  qemu: conf: Clarify default of "vnc_tls_x509_verify"
  qemu: conf: Enable 'chardev_tls_x509_verify' by default
  qemu: conf: Enable 'migrate_tls_x509_verify' by default
  qemu: conf: Enable 'backup_tls_x509_verify' by default
  NEWS: Mention change of default for TLS certificate verification

 NEWS.rst             | 11 +++++++++++
 src/qemu/qemu.conf   | 18 ++++++++++++++----
 src/qemu/qemu_conf.c | 22 ++++++++++++++--------
 src/qemu/qemu_conf.h |  1 +
 4 files changed, 40 insertions(+), 12 deletions(-)

-- 
2.28.0

Re: [PATCH 0/6] qemu: Enable client TLS certificate validation by default for chardev, migration, and backup servers

Posted by Michal Privoznik 5 years, 2 months ago

On 11/13/20 4:01 PM, Peter Krempa wrote:
> See patches 6 for a explanation.
> 
> Peter Krempa (6):
>    qemu: conf: Allow individual control of default value for
>      *_tls_x509_verify
>    qemu: conf: Clarify default of "vnc_tls_x509_verify"
>    qemu: conf: Enable 'chardev_tls_x509_verify' by default
>    qemu: conf: Enable 'migrate_tls_x509_verify' by default
>    qemu: conf: Enable 'backup_tls_x509_verify' by default
>    NEWS: Mention change of default for TLS certificate verification
> 
>   NEWS.rst             | 11 +++++++++++
>   src/qemu/qemu.conf   | 18 ++++++++++++++----
>   src/qemu/qemu_conf.c | 22 ++++++++++++++--------
>   src/qemu/qemu_conf.h |  1 +
>   4 files changed, 40 insertions(+), 12 deletions(-)
> 

Reviewed-by: Michal Privoznik <mprivozn@redhat.com>

Michal