From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([2001:4830:134:3::10]:56682) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1ZUiIn-00008s-0w for qemu-devel@nongnu.org; Wed, 26 Aug 2015 17:32:14 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1ZUiIj-0007VB-PX for qemu-devel@nongnu.org; Wed, 26 Aug 2015 17:32:12 -0400 Received: from mx1.redhat.com ([209.132.183.28]:37939) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1ZUiIj-0007UW-KM for qemu-devel@nongnu.org; Wed, 26 Aug 2015 17:32:09 -0400 Received: from int-mx11.intmail.prod.int.phx2.redhat.com (int-mx11.intmail.prod.int.phx2.redhat.com [10.5.11.24]) by mx1.redhat.com (Postfix) with ESMTPS id 136EBA8E for ; Wed, 26 Aug 2015 21:32:09 +0000 (UTC) References: <1440601524-30316-1-git-send-email-berrange@redhat.com> <1440601524-30316-6-git-send-email-berrange@redhat.com> From: Eric Blake Message-ID: <55DE3057.3080601@redhat.com> Date: Wed, 26 Aug 2015 15:32:07 -0600 MIME-Version: 1.0 In-Reply-To: <1440601524-30316-6-git-send-email-berrange@redhat.com> Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="QgMtpMJBW7F6pVVAiX0JAI3vgi9mDqkrw" Subject: Re: [Qemu-devel] [PATCH v5 5/9] crypto: introduce new module for TLS x509 credentials List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: "Daniel P. Berrange" , qemu-devel@nongnu.org Cc: Paolo Bonzini , Gerd Hoffmann This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --QgMtpMJBW7F6pVVAiX0JAI3vgi9mDqkrw Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable On 08/26/2015 09:05 AM, Daniel P. Berrange wrote: > Introduce a QCryptoTLSCredsX509 class which is used to > manage x509 certificate TLS credentials. This will be > the preferred credential type offering strong security > characteristics >=20 > Example CLI configuration: >=20 > $QEMU -object tls-creds-x509,id=3Dtls0,endpoint=3Dserver,\ > dir=3D/path/to/creds/dir,verify-peer=3Dyes >=20 > The 'id' value in the -object args will be used to associate the > credentials with the network services. For eample, when the VNC s/eample/example/ > server is later converted it would use >=20 > $QEMU -object tls-creds-x509,id=3Dtls0,.... \ > -vnc 127.0.0.1:1,tls-creds=3Dtls0 >=20 > Signed-off-by: Daniel P. Berrange > --- Reviewed-by: Eric Blake --=20 Eric Blake eblake redhat com +1-919-301-3266 Libvirt virtualization library http://libvirt.org --QgMtpMJBW7F6pVVAiX0JAI3vgi9mDqkrw Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 Comment: Public key at http://people.redhat.com/eblake/eblake.gpg Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQEcBAEBCAAGBQJV3jBXAAoJEKeha0olJ0Nqv/UH/2d0fWYgEfS7UhCPbSpVpM12 cjBXQ1RjUUVSIBiL3c+wUXhGNo0X5HapaI2OnvEo1SIqEXQaxQ4ZHMq1w4ilRN+z OexLNjqGfiyikRFudYVdF/+B6VFhopkeKoXO69U2jikGZGn7neSj5W0saA8Drepv x1moPirhqUD//NgBMtNoHVQhPbFTtU6WZwwhQZaI+rG09gpdt5H6YVY8pdHBxXJd xA1onYOAIRNcVSfgMMdjJ/IHzRtMtEAjHA7YrPbp/cWnIMSoQp4hJyaX+IEuxv7q /ETpE/CTyFaexhoXQzVdxJcP0HPNQBVEiewTLOYIouJSdhWEURnJ2IDlkPiiErY= =qiud -----END PGP SIGNATURE----- --QgMtpMJBW7F6pVVAiX0JAI3vgi9mDqkrw--