Re: [libvirt] [PATCH 1/2] Add some basic sanity checking of certificates before use

2011-07-19 Thread Daniel P. Berrange
On Tue, Jul 19, 2011 at 08:40:50AM -0600, Eric Blake wrote: > On 07/19/2011 07:55 AM, Daniel P. Berrange wrote: > >If the libvirt daemon or libvirt client is configured with bogus > >certificates, it is very unhelpful to only find out about this > >when a TLS connection is actually attempted. Not l

Re: [libvirt] [PATCH 1/2] Add some basic sanity checking of certificates before use

2011-07-19 Thread Eric Blake
On 07/19/2011 07:55 AM, Daniel P. Berrange wrote: If the libvirt daemon or libvirt client is configured with bogus certificates, it is very unhelpful to only find out about this when a TLS connection is actually attempted. Not least because the error messages you get back for failures are incredi

[libvirt] [PATCH 1/2] Add some basic sanity checking of certificates before use

2011-07-19 Thread Daniel P. Berrange
If the libvirt daemon or libvirt client is configured with bogus certificates, it is very unhelpful to only find out about this when a TLS connection is actually attempted. Not least because the error messages you get back for failures are incredibly obscure. This adds some basic sanity checking o