Re: [libvirt] [PATCH v3 1/6] qemu-nbd: add support for authorization of TLS clients

2018-11-15 Thread Daniel P . Berrangé
On Mon, Nov 05, 2018 at 04:41:09PM -0600, Eric Blake wrote: > On 10/9/18 8:23 AM, Daniel P. Berrangé wrote: > > From: "Daniel P. Berrange" > > > > Currently any client which can complete the TLS handshake is able to use > > the NBD server. The server admin can turn on the 'verify-peer' option >

Re: [libvirt] [PATCH v3 1/6] qemu-nbd: add support for authorization of TLS clients

2018-11-15 Thread Daniel P . Berrangé
On Mon, Nov 05, 2018 at 04:41:09PM -0600, Eric Blake wrote: > On 10/9/18 8:23 AM, Daniel P. Berrangé wrote: > > From: "Daniel P. Berrange" > > > > Currently any client which can complete the TLS handshake is able to use > > the NBD server. The server admin can turn on the 'verify-peer' option >

Re: [libvirt] [PATCH v3 1/6] qemu-nbd: add support for authorization of TLS clients

2018-11-05 Thread Eric Blake
On 10/9/18 8:23 AM, Daniel P. Berrangé wrote: From: "Daniel P. Berrange" Currently any client which can complete the TLS handshake is able to use the NBD server. The server admin can turn on the 'verify-peer' option for the x509 creds to require the client to provide a x509 certificate. This

Re: [libvirt] [PATCH v3 1/6] qemu-nbd: add support for authorization of TLS clients

2018-10-17 Thread Juan Quintela
Daniel P. Berrangé wrote: > From: "Daniel P. Berrange" > > Currently any client which can complete the TLS handshake is able to use > the NBD server. The server admin can turn on the 'verify-peer' option > for the x509 creds to require the client to provide a x509 certificate. > This means the

[libvirt] [PATCH v3 1/6] qemu-nbd: add support for authorization of TLS clients

2018-10-09 Thread Daniel P . Berrangé
From: "Daniel P. Berrange" Currently any client which can complete the TLS handshake is able to use the NBD server. The server admin can turn on the 'verify-peer' option for the x509 creds to require the client to provide a x509 certificate. This means the client will have to acquire a