From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mailman by lists.gnu.org with tmda-scanned (Exim 4.43) id 1HJIzn-0003oJ-Lg for qemu-devel@nongnu.org; Mon, 19 Feb 2007 19:36:39 -0500 Received: from exim by lists.gnu.org with spam-scanned (Exim 4.43) id 1HJIzn-0003o0-6L for qemu-devel@nongnu.org; Mon, 19 Feb 2007 19:36:39 -0500 Received: from [199.232.76.173] (helo=monty-python.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1HJIzn-0003nx-01 for qemu-devel@nongnu.org; Mon, 19 Feb 2007 19:36:39 -0500 Received: from mx1.redhat.com ([66.187.233.31]) by monty-python.gnu.org with esmtp (Exim 4.52) id 1HJIzm-0005pE-Br for qemu-devel@nongnu.org; Mon, 19 Feb 2007 19:36:38 -0500 Received: from int-mx1.corp.redhat.com (int-mx1.corp.redhat.com [172.16.52.254]) by mx1.redhat.com (8.13.1/8.13.1) with ESMTP id l1K0ab8L025871 for ; Mon, 19 Feb 2007 19:36:37 -0500 Received: from file.surrey.redhat.com (file.surrey.redhat.com [172.16.10.4]) by int-mx1.corp.redhat.com (8.13.1/8.13.1) with ESMTP id l1K0aajH019788 for ; Mon, 19 Feb 2007 19:36:37 -0500 Received: (from berrange@localhost) by file.surrey.redhat.com (8.13.1/8.13.1/Submit) id l1K0aaOg022420 for qemu-devel@nongnu.org; Tue, 20 Feb 2007 00:36:36 GMT Date: Tue, 20 Feb 2007 00:36:36 +0000 From: "Daniel P. Berrange" Subject: Re: [Qemu-devel] QEMU: VNC Message-ID: <20070220003635.GB5172@redhat.com> References: <200702161402.23660.cwolsen@domainatlantic.com> <20070219190929.GT31525@redhat.com> <45DA2A46.1080105@bellard.org> <200702191837.39476.cwolsen@domainatlantic.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <200702191837.39476.cwolsen@domainatlantic.com> Reply-To: "Daniel P. Berrange" , qemu-devel@nongnu.org List-Id: qemu-devel.nongnu.org List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: qemu-devel@nongnu.org On Mon, Feb 19, 2007 at 06:37:39PM -0500, Christopher Olsen wrote: > On Monday 19 February 2007 17:52, Fabrice Bellard wrote: > > > > On the technical side, adding OpenSSL support in the current VNC > > implementation is QEMU seems easy (OpenSSL has a non blocking API which > > can be used with the current callback API). > > > > Fabrice. > > > > Good call... Let me look into that. Actually OpenSSL has some potential licensing issues when combined with GPL code so I'd avoid it. The GNU TLS library, however, is just as easy to integrate into existing programs - I've modified a number of apps to use it very successfully. Or if you want support for all manner of crypto key management hardware devices, there's also Mozilla NSS libraries. All support non-blocking APIs, so aside from the extra code to do the TLS handshake and key verification, there's little modification needed to the main codebase - eg for GNU TLS once handshake is complete you can simply replace read()/write() calls with gnutls_read() / gnutls_write() Regards, Dan. [1] http://lists.debian.org/debian-legal/2004/05/msg00595.html http://www.gnome.org/~markmc/openssl-and-the-gpl.html -- |=- Red Hat, Engineering, Emerging Technologies, Boston. +1 978 392 2496 -=| |=- Perl modules: http://search.cpan.org/~danberr/ -=| |=- Projects: http://freshmeat.net/~danielpb/ -=| |=- GnuPG: 7D3B9505 F3C9 553F A1DA 4AC2 5648 23C1 B3DF F742 7D3B 9505 -=|