From mboxrd@z Thu Jan  1 00:00:00 1970
Received: from mailman by lists.gnu.org with tmda-scanned (Exim 4.43)
	id 1NKCkQ-0007u8-0V
	for qemu-devel@nongnu.org; Mon, 14 Dec 2009 10:22:06 -0500
Received: from exim by lists.gnu.org with spam-scanned (Exim 4.43)
	id 1NKCkK-0007pu-MR
	for qemu-devel@nongnu.org; Mon, 14 Dec 2009 10:22:05 -0500
Received: from [199.232.76.173] (port=33664 helo=monty-python.gnu.org)
	by lists.gnu.org with esmtp (Exim 4.43) id 1NKCkK-0007pk-Er
	for qemu-devel@nongnu.org; Mon, 14 Dec 2009 10:22:00 -0500
Received: from mx1.redhat.com ([209.132.183.28]:24867)
	by monty-python.gnu.org with esmtp (Exim 4.60)
	(envelope-from <avi@redhat.com>) id 1NKCkJ-0001xj-OS
	for qemu-devel@nongnu.org; Mon, 14 Dec 2009 10:22:00 -0500
Message-ID: <4B265814.7060801@redhat.com>
Date: Mon, 14 Dec 2009 17:21:56 +0200
From: Avi Kivity <avi@redhat.com>
MIME-Version: 1.0
Subject: Re: [Qemu-devel] Re: Spice project is now open
References: <4B231182.1080208@codemonkey.ws>
	<20091212144433.GA26966@random.random>
	<4B23B0BE.7080408@codemonkey.ws>
	<20091212160626.GB26966@random.random>
	<4B23D585.70400@codemonkey.ws> <4B241A99.2000704@redhat.com>
	<4B242B40.4050409@codemonkey.ws> <4B24C5EF.2090607@redhat.com>
	<4B264EC4.7020500@codemonkey.ws> <4B265153.3050705@redhat.com>
	<20091214151705.GH23733@redhat.com>
In-Reply-To: <20091214151705.GH23733@redhat.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
List-Id: qemu-devel.nongnu.org
List-Unsubscribe: <http://lists.nongnu.org/mailman/listinfo/qemu-devel>,
	<mailto:qemu-devel-request@nongnu.org?subject=unsubscribe>
List-Archive: <http://lists.gnu.org/pipermail/qemu-devel>
List-Post: <mailto:qemu-devel@nongnu.org>
List-Help: <mailto:qemu-devel-request@nongnu.org?subject=help>
List-Subscribe: <http://lists.nongnu.org/mailman/listinfo/qemu-devel>,
	<mailto:qemu-devel-request@nongnu.org?subject=subscribe>
To: "Daniel P. Berrange" <berrange@redhat.com>
Cc: Andrea Arcangeli <aarcange@redhat.com>, Paolo Bonzini <pbonzini@redhat.com>, dlaor@redhat.com, qemu-devel@nongnu.org

On 12/14/2009 05:17 PM, Daniel P. Berrange wrote:
>
>> Yes - need to pass the encryption state.  Hopefully the crypto stacks
>> support this.
>>      
> There's no mechanism for this in the SASL libraries. With GNUTLS there is
> the ability to preserve negotiated session state from one TLS conenection
> and used it upon opening the next connection to fast-track the handshake
> phase. This doesn't allow you to pass the state for an existing connection
> to a new process though and have it carry on
>    

This sucks.  But we can ask the client to reauthenticate.

-- 
error compiling committee.c: too many arguments to function