[Qemu-commits] [qemu/qemu] 5d19a6: docs: update information for TLS certificate manag...

[GitHub]

  Branch: refs/heads/master
  Home:   https://github.com/qemu/qemu
  Commit: 5d19a6eae9153b9daa3570fde502031b7121b07e
      
https://github.com/qemu/qemu/commit/5d19a6eae9153b9daa3570fde502031b7121b07e
  Author: Daniel P. Berrange <address@hidden>
  Date:   2018-04-06 (Fri, 06 Apr 2018)

  Changed paths:
    M qemu-doc.texi

  Log Message:
  -----------
  docs: update information for TLS certificate management

The current docs for TLS assume only VNC is using TLS. Some of the information
is also outdated (ie lacking subject alt name info for certs). Rewrite it to
more accurately reflect the current situation.

Reviewed-by: Eric Blake <address@hidden>
Reviewed-by: Kashyap Chamarthy <address@hidden>
Signed-off-by: Daniel P. Berrange <address@hidden>


  Commit: 00e5e9df29453964c724f2156b6fbf32620d8b7e
      
https://github.com/qemu/qemu/commit/00e5e9df29453964c724f2156b6fbf32620d8b7e
  Author: Christophe Fergeau <address@hidden>
  Date:   2018-04-06 (Fri, 06 Apr 2018)

  Changed paths:
    M qemu-options.hx

  Log Message:
  -----------
  docs: Document -object tls-creds-x509 priority=xxx

This was added in 13f1243, but is missing from qemu-options.hx

Signed-off-by: Christophe Fergeau <address@hidden>
Signed-off-by: Daniel P. Berrangé <address@hidden>


  Commit: 057ad0b46992e3ec4ce29b9103162aa3c683f347
      
https://github.com/qemu/qemu/commit/057ad0b46992e3ec4ce29b9103162aa3c683f347
  Author: Daniel P. Berrangé <address@hidden>
  Date:   2018-04-06 (Fri, 06 Apr 2018)

  Changed paths:
    M tests/test-crypto-tlssession.c
    M tests/test-io-channel-tls.c

  Log Message:
  -----------
  crypto: ensure we use a predictable TLS priority setting

The TLS test cert generation relies on a fixed set of algorithms that are
only usable under GNUTLS' default priority setting. When building QEMU
with a custom distro specific priority setting, this can cause the TLS
tests to fail. By forcing the tests to always use "NORMAL" priority we
can make them more robust.

Reviewed-by: Eric Blake <address@hidden>
Signed-off-by: Daniel P. Berrangé <address@hidden>


  Commit: 08e173f29461396575c85510eb41474b993cb1fb
      
https://github.com/qemu/qemu/commit/08e173f29461396575c85510eb41474b993cb1fb
  Author: Peter Maydell <address@hidden>
  Date:   2018-04-06 (Fri, 06 Apr 2018)

  Changed paths:
    M qemu-doc.texi
    M qemu-options.hx
    M tests/test-crypto-tlssession.c
    M tests/test-io-channel-tls.c

  Log Message:
  -----------
  Merge remote-tracking branch 
'remotes/berrange/tags/qcrypto-next-pull-request' into staging

# gpg: Signature made Fri 06 Apr 2018 14:29:10 BST
# gpg:                using RSA key BE86EBB415104FDF
# gpg: Good signature from "Daniel P. Berrange <address@hidden>"
# gpg:                 aka "Daniel P. Berrange <address@hidden>"
# Primary key fingerprint: DAF3 A6FD B26B 6291 2D0E  8E3F BE86 EBB4 1510 4FDF

* remotes/berrange/tags/qcrypto-next-pull-request:
  crypto: ensure we use a predictable TLS priority setting
  docs: Document -object tls-creds-x509 priority=xxx
  docs: update information for TLS certificate management

Signed-off-by: Peter Maydell <address@hidden>


Compare: https://github.com/qemu/qemu/compare/d7fa7fb504bc...08e173f29461