[PULL 00/11] Crypto patches

Daniel P. Berrangé posted 11 patches 1 month, 2 weeks ago
MAINTAINERS                                   |   3 +-
chardev/char-socket.c                         |  37 ++--
chardev/trace-events                          |  10 +
crypto/init.c                                 |  15 +-
crypto/tlssession.c                           | 124 ++++++++----
docs/devel/crypto.rst                         |  10 +
docs/devel/index-internals.rst                |   1 +
docs/devel/luks-detached-header.rst           | 182 ++++++++++++++++++
include/crypto/tlssession.h                   |  33 +++-
io/channel-tls.c                              |  66 +++----
meson.build                                   |   4 +-
qapi/crypto.json                              |   5 +-
tests/qtest/meson.build                       |   3 +-
tests/unit/crypto-tls-psk-helpers.c           |   1 -
tests/unit/crypto-tls-x509-helpers.c          |   6 +-
tests/unit/crypto-tls-x509-helpers.h          |   3 -
tests/unit/meson.build                        |   6 +-
.../{pkix_asn1_tab.c => pkix_asn1_tab.c.inc}  |   5 +-
tests/unit/test-crypto-tlssession.c           |  30 ++-
19 files changed, 418 insertions(+), 126 deletions(-)
create mode 100644 docs/devel/crypto.rst
create mode 100644 docs/devel/luks-detached-header.rst
rename tests/unit/{pkix_asn1_tab.c => pkix_asn1_tab.c.inc} (99%)
[PULL 00/11] Crypto patches
Posted by Daniel P. Berrangé 1 month, 2 weeks ago
The following changes since commit 6410f877f5ed535acd01bbfaa4baec379e44d0ef:

  Merge tag 'hw-misc-20240723' of https://github.com/philmd/qemu into staging (2024-07-24 15:39:43 +1000)

are available in the Git repository at:

  https://gitlab.com/berrange/qemu tags/misc-fixes-pull-request

for you to fetch changes up to 97f7bf113eb50fcdaf0c73aa2ee01e5355abc073:

  crypto: propagate errors from TLS session I/O callbacks (2024-07-24 10:39:10 +0100)

----------------------------------------------------------------

* Drop unused 'detached-header' QAPI field from LUKS create options
* Improve tracing of TLS sockets and TLS chardevs
* Improve error messages from TLS I/O failures
* Add docs about use of LUKS detached header options
* Allow building without libtasn1, but with GNUTLS
* Fix detection of libgcrypt when libgcrypt-config is absent

----------------------------------------------------------------

Daniel P. Berrangé (6):
  qapi: drop unused QCryptoBlockCreateOptionsLUKS.detached-header
  meson: build chardev trace files when have_block
  chardev: add tracing of socket error conditions
  crypto: drop gnutls debug logging support
  crypto: push error reporting into TLS session I/O APIs
  crypto: propagate errors from TLS session I/O callbacks

Hyman Huang (1):
  docs/devel: Add introduction to LUKS volume with detached header

Philippe Mathieu-Daudé (3):
  crypto: Remove 'crypto-tls-x509-helpers.h' from
    crypto-tls-psk-helpers.c
  crypto: Restrict pkix_asn1_tab[] to crypto-tls-x509-helpers.c
  crypto: Allow building with GnuTLS but without Libtasn1

Yao Zi (1):
  meson.build: fix libgcrypt detection on system without
    libgcrypt-config

 MAINTAINERS                                   |   3 +-
 chardev/char-socket.c                         |  37 ++--
 chardev/trace-events                          |  10 +
 crypto/init.c                                 |  15 +-
 crypto/tlssession.c                           | 124 ++++++++----
 docs/devel/crypto.rst                         |  10 +
 docs/devel/index-internals.rst                |   1 +
 docs/devel/luks-detached-header.rst           | 182 ++++++++++++++++++
 include/crypto/tlssession.h                   |  33 +++-
 io/channel-tls.c                              |  66 +++----
 meson.build                                   |   4 +-
 qapi/crypto.json                              |   5 +-
 tests/qtest/meson.build                       |   3 +-
 tests/unit/crypto-tls-psk-helpers.c           |   1 -
 tests/unit/crypto-tls-x509-helpers.c          |   6 +-
 tests/unit/crypto-tls-x509-helpers.h          |   3 -
 tests/unit/meson.build                        |   6 +-
 .../{pkix_asn1_tab.c => pkix_asn1_tab.c.inc}  |   5 +-
 tests/unit/test-crypto-tlssession.c           |  30 ++-
 19 files changed, 418 insertions(+), 126 deletions(-)
 create mode 100644 docs/devel/crypto.rst
 create mode 100644 docs/devel/luks-detached-header.rst
 rename tests/unit/{pkix_asn1_tab.c => pkix_asn1_tab.c.inc} (99%)

-- 
2.45.2


Re: [PULL 00/11] Crypto patches
Posted by Richard Henderson 1 month, 2 weeks ago
On 7/24/24 19:46, Daniel P. Berrangé wrote:
> The following changes since commit 6410f877f5ed535acd01bbfaa4baec379e44d0ef:
> 
>    Merge tag 'hw-misc-20240723' ofhttps://github.com/philmd/qemu into staging (2024-07-24 15:39:43 +1000)
> 
> are available in the Git repository at:
> 
>    https://gitlab.com/berrange/qemu tags/misc-fixes-pull-request
> 
> for you to fetch changes up to 97f7bf113eb50fcdaf0c73aa2ee01e5355abc073:
> 
>    crypto: propagate errors from TLS session I/O callbacks (2024-07-24 10:39:10 +0100)
> 
> ----------------------------------------------------------------
> 
> * Drop unused 'detached-header' QAPI field from LUKS create options
> * Improve tracing of TLS sockets and TLS chardevs
> * Improve error messages from TLS I/O failures
> * Add docs about use of LUKS detached header options
> * Allow building without libtasn1, but with GNUTLS
> * Fix detection of libgcrypt when libgcrypt-config is absent

Applied, thanks.  Please update https://wiki.qemu.org/ChangeLog/9.1 as appropriate.

r~