From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([208.118.235.92]:34479) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1UezYQ-0007Wj-Ny for qemu-devel@nongnu.org; Tue, 21 May 2013 23:17:40 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1UezYG-0007rD-9H for qemu-devel@nongnu.org; Tue, 21 May 2013 23:17:30 -0400 Received: from mx1.redhat.com ([209.132.183.28]:24636) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1UezYF-0007r3-Ug for qemu-devel@nongnu.org; Tue, 21 May 2013 23:17:20 -0400 Received: from int-mx02.intmail.prod.int.phx2.redhat.com (int-mx02.intmail.prod.int.phx2.redhat.com [10.5.11.12]) by mx1.redhat.com (8.14.4/8.14.4) with ESMTP id r4M3HJ5C002991 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK) for ; Tue, 21 May 2013 23:17:19 -0400 Received: from localhost.nay.redhat.com ([10.66.7.14]) by int-mx02.intmail.prod.int.phx2.redhat.com (8.13.8/8.13.8) with ESMTP id r4M3GqNs024814 for ; Tue, 21 May 2013 23:17:18 -0400 From: Fam Zheng Date: Wed, 22 May 2013 11:16:50 +0800 Message-Id: <1369192610-25003-11-git-send-email-famz@redhat.com> In-Reply-To: <1369192610-25003-1-git-send-email-famz@redhat.com> References: <1369192610-25003-1-git-send-email-famz@redhat.com> Subject: [Qemu-devel] [PATCH v4 10/10] curl: introduce ssl_no_cert runtime option. List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: qemu-devel@nongnu.org Added an option to let curl disable ssl certificate check. Signed-off-by: Fam Zheng --- block/curl.c | 12 +++++++++++- 1 file changed, 11 insertions(+), 1 deletion(-) diff --git a/block/curl.c b/block/curl.c index 5adbc84..b6cc5a0 100644 --- a/block/curl.c +++ b/block/curl.c @@ -95,6 +95,8 @@ typedef struct BDRVCURLState { int cache_quota; /* Whether http server accept range in header */ bool accept_range; + /* Whether certificated ssl only */ + bool ssl_no_cert; } BDRVCURLState; static void curl_clean_state(CURLState *s); @@ -339,6 +341,8 @@ static CURLState *curl_init_state(BDRVCURLState *s) curl_easy_setopt(state->curl, CURLOPT_NOSIGNAL, 1); curl_easy_setopt(state->curl, CURLOPT_ERRORBUFFER, state->errmsg); curl_easy_setopt(state->curl, CURLOPT_FAILONERROR, 1); + curl_easy_setopt(state->curl, CURLOPT_SSL_VERIFYPEER, + s->ssl_no_cert ? 0 : 1); /* Restrict supported protocols to avoid security issues in the more * obscure protocols. For example, do not allow POP3/SMTP/IMAP see @@ -429,7 +433,12 @@ static QemuOptsList runtime_opts = { .type = QEMU_OPT_SIZE, .help = "Readahead size", }, - { /* end of list */ } + { + .name = "ssl_no_cert", + .type = QEMU_OPT_BOOL, + .help = "SSL certificate check", + }, + { /* End of list */ } }, }; @@ -467,6 +476,7 @@ static int curl_open(BlockDriverState *bs, QDict *options, int flags) goto out_noclean; } + s->ssl_no_cert = qemu_opt_get_bool(opts, "ssl_no_cert", true); if (!inited) { curl_global_init(CURL_GLOBAL_ALL); inited = 1; -- 1.8.2.3