Re: [libvirt] qemu+tls server certificate validation failure (The certificate is not trusted)

2009-04-27 Thread Scott Beardsley
> BTW, will certtool verify certs ala "openssl verify" ? $ certtool --verify-chain --infile /etc/pki/CA/cacert.pem |grep Verification Verification output: Verified. I found the verify-chain option but it doesn't like it when I add my x509 client cert. -- Libvir-list mailing list Libvir-l

Re: [libvirt] qemu+tls server certificate validation failure (The certificate is not trusted)

2009-04-27 Thread Scott Beardsley
> This error message comes from gnutls_certificate_verify_peers2() and > maps to the annoyingly generic GNUTLS_CERT_INVALID error code. indeed >> The server's config has not changed (I've tested against libvirt-bin >> versions 0.4.4-3ubuntu3.1 and 0.4.0-2ubuntu8.1 on the server side). I >> have t

Re: [libvirt] qemu+tls server certificate validation failure (The certificate is not trusted)

2009-04-27 Thread Daniel P. Berrange
On Mon, Apr 27, 2009 at 02:37:28PM -0700, Scott Beardsley wrote: > I'm having a problem with remote TLS libvirt connections from an > Ubuntu Jaunty client. I've reported the bug here[1] but haven't had > any hits yet so I thought I'd come to the source. Let me know if ya'll > have any ideas or know

[libvirt] qemu+tls server certificate validation failure (The certificate is not trusted)

2009-04-27 Thread Scott Beardsley
I'm having a problem with remote TLS libvirt connections from an Ubuntu Jaunty client. I've reported the bug here[1] but haven't had any hits yet so I thought I'd come to the source. Let me know if ya'll have any ideas or know of any bugs in the versions I'm using (see below). I just upgraded my cl

Re: [libvirt] PATCH: Fix compiler flag check for -Wformat-security

2009-04-27 Thread Laine Stump
On 04/27/2009 08:28 AM, Daniel Veillard wrote: Hum, I noticed recently that some packages change the make output to just print something like the following when compiling a C module: CC module.c instead of the now 3-4 lines of compiler flags, which make spotting warnings way easier. Maybe th

Re: [libvirt] PATCH: Fix compiler flag check for -Wformat-security

2009-04-27 Thread Daniel P. Berrange
On Mon, Apr 27, 2009 at 02:28:58PM +0200, Daniel Veillard wrote: > On Mon, Apr 27, 2009 at 02:25:16PM +0200, Daniel Veillard wrote: > > On Mon, Apr 27, 2009 at 11:37:35AM +0100, Daniel P. Berrange wrote: > > > Certain versions of GCC will ignore the -Wformat-security flag unless you > > > have also

Re: [libvirt] PATCH: Fix compiler flag check for -Wformat-security

2009-04-27 Thread Daniel Veillard
On Mon, Apr 27, 2009 at 02:25:16PM +0200, Daniel Veillard wrote: > On Mon, Apr 27, 2009 at 11:37:35AM +0100, Daniel P. Berrange wrote: > > Certain versions of GCC will ignore the -Wformat-security flag unless you > > have also set the -Wformat flag. Unfortunately when checking flags, we only Hum

Re: [libvirt] PATCH: Fix compiler flag check for -Wformat-security

2009-04-27 Thread Daniel Veillard
On Mon, Apr 27, 2009 at 11:37:35AM +0100, Daniel P. Berrange wrote: > Certain versions of GCC will ignore the -Wformat-security flag unless you > have also set the -Wformat flag. Unfortunately when checking flags, we only > check one at a time in isolation, so it was thinking -Wformat-security > is

[libvirt] PATCH: Fix compiler flag check for -Wformat-security

2009-04-27 Thread Daniel P. Berrange
Certain versions of GCC will ignore the -Wformat-security flag unless you have also set the -Wformat flag. Unfortunately when checking flags, we only check one at a time in isolation, so it was thinking -Wformat-security is not supported in Fedora. The fix is to include all previously verified flag

Re: [libvirt] libvirt Driver support Matrix.

2009-04-27 Thread Daniel Veillard
On Fri, Apr 24, 2009 at 10:54:08PM +0100, Daniel P. Berrange wrote: > On Fri, Apr 24, 2009 at 02:29:11PM +0530, Abhishek K Jha wrote: > > Hi, > > > > I needed to know if libvirt supports migration via the QEMU/KVM driver. ( > > virDomainMigrate) > > Yes it is supported in KVM >= 79, or QEMU >= 0.

Re: [libvirt] 802.1q vlan-tagging support for libvirt

2009-04-27 Thread David Edmondson
On Wed, Apr 08, 2009 at 12:09:06PM +0100, Daniel P. Berrange wrote: > On Wed, Apr 08, 2009 at 01:06:48PM +0200, Maximilian Wilhelm wrote: > > Anno domini 2009 Daniel P. Berrange scripsit: > > > > [...] > > > In the (nearish) future NICs will start appearing with SR-IOV > > > capabilities. > > > T