Re: [Qemu-devel] [PATCH v2 4/4] char: introduce support for TLS encrypted TCP chardev backend

["Daniel P. Berrange" <berrange@redhat.com>]

On Mon, Dec 21, 2015 at 05:02:40PM +0100, Paolo Bonzini wrote:
> 
> 
> On 21/12/2015 16:42, Daniel P. Berrange wrote:
> > This integrates support for QIOChannelTLS object in the TCP
> > chardev backend. If the 'tls-creds=NAME' option is passed with
> > the '-chardev tcp' argument, then it will setup the chardev
> > such that the client is required to establish a TLS handshake
> > when connecting. There is no support for checking the client
> > certificate against ACLs in this initial patch. This is pending
> > work to QOM-ify the ACL object code.
> 
> Are you also planning AF_UNIX support or does it make no sense?

I wasn't planning on it as I don't think it adds any real value.
AF_UNIX sockets are trivially secure since they're purely local.

Regards,
Daniel
-- 
|: http://berrange.com      -o-    http://www.flickr.com/photos/dberrange/ :|
|: http://libvirt.org              -o-             http://virt-manager.org :|
|: http://autobuild.org       -o-         http://search.cpan.org/~danberr/ :|
|: http://entangle-photo.org       -o-       http://live.gnome.org/gtk-vnc :|