Re: [Qemu-block] [PATCH 3/6] migration: add support for a "tls-authz" migration parameter

2018-06-20 Thread Juan Quintela
Daniel P. Berrangé wrote: > On Wed, Jun 20, 2018 at 12:03:45PM +0200, Juan Quintela wrote: >> Daniel P. Berrangé wrote: >> > From: "Daniel P. Berrange" >> >> . >> >> >> It is not just the fault of this patch, but as you are the one doing the >> tls bits on migration... >> >> >> > @@

Re: [Qemu-block] [PATCH 3/6] migration: add support for a "tls-authz" migration parameter

2018-06-20 Thread Daniel P . Berrangé
On Wed, Jun 20, 2018 at 12:03:45PM +0200, Juan Quintela wrote: > Daniel P. Berrangé wrote: > > From: "Daniel P. Berrange" > > . > > > It is not just the fault of this patch, but as you are the one doing the > tls bits on migration... > > > > @@ -1106,6 +1108,12 @@ static void > >

Re: [Qemu-block] [PATCH 3/6] migration: add support for a "tls-authz" migration parameter

2018-06-20 Thread Juan Quintela
Daniel P. Berrangé wrote: > From: "Daniel P. Berrange" . It is not just the fault of this patch, but as you are the one doing the tls bits on migration... > @@ -1106,6 +1108,12 @@ static void migrate_params_apply(MigrateSetParameters > *params, Error **errp) >

Re: [Qemu-block] [PATCH 3/6] migration: add support for a "tls-authz" migration parameter

2018-06-18 Thread Daniel P . Berrangé
On Fri, Jun 15, 2018 at 06:54:23PM +0100, Dr. David Alan Gilbert wrote: > * Daniel P. Berrangé (berra...@redhat.com) wrote: > > From: "Daniel P. Berrange" > > > > The QEMU instance that runs as the server for the migration data > > transport (ie the target QEMU) needs to be able to configure

Re: [Qemu-block] [PATCH 3/6] migration: add support for a "tls-authz" migration parameter

2018-06-15 Thread Dr. David Alan Gilbert
* Daniel P. Berrangé (berra...@redhat.com) wrote: > From: "Daniel P. Berrange" > > The QEMU instance that runs as the server for the migration data > transport (ie the target QEMU) needs to be able to configure access > control so it can prevent unauthorized clients initiating an incoming >

[Qemu-block] [PATCH 3/6] migration: add support for a "tls-authz" migration parameter

2018-06-15 Thread Daniel P . Berrangé
From: "Daniel P. Berrange" The QEMU instance that runs as the server for the migration data transport (ie the target QEMU) needs to be able to configure access control so it can prevent unauthorized clients initiating an incoming migration. This adds a new 'tls-authz' migration parameter that is