From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([2001:4830:134:3::10]:60521) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1aB2vC-0004q5-VT for qemu-devel@nongnu.org; Mon, 21 Dec 2015 11:02:51 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1aB2v8-0006MQ-Vb for qemu-devel@nongnu.org; Mon, 21 Dec 2015 11:02:50 -0500 Received: from mx1.redhat.com ([209.132.183.28]:55616) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1aB2v8-0006MG-R0 for qemu-devel@nongnu.org; Mon, 21 Dec 2015 11:02:46 -0500 Received: from int-mx11.intmail.prod.int.phx2.redhat.com (int-mx11.intmail.prod.int.phx2.redhat.com [10.5.11.24]) by mx1.redhat.com (Postfix) with ESMTPS id 618C3C0B9300 for ; Mon, 21 Dec 2015 16:02:46 +0000 (UTC) References: <1450712543-11629-1-git-send-email-berrange@redhat.com> <1450712543-11629-5-git-send-email-berrange@redhat.com> From: Paolo Bonzini Message-ID: <567822A0.3020504@redhat.com> Date: Mon, 21 Dec 2015 17:02:40 +0100 MIME-Version: 1.0 In-Reply-To: <1450712543-11629-5-git-send-email-berrange@redhat.com> Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 7bit Subject: Re: [Qemu-devel] [PATCH v2 4/4] char: introduce support for TLS encrypted TCP chardev backend List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: "Daniel P. Berrange" , qemu-devel@nongnu.org On 21/12/2015 16:42, Daniel P. Berrange wrote: > This integrates support for QIOChannelTLS object in the TCP > chardev backend. If the 'tls-creds=NAME' option is passed with > the '-chardev tcp' argument, then it will setup the chardev > such that the client is required to establish a TLS handshake > when connecting. There is no support for checking the client > certificate against ACLs in this initial patch. This is pending > work to QOM-ify the ACL object code. Are you also planning AF_UNIX support or does it make no sense? Paolo