Re: [Qemu-devel] [PATCH v3 07/10] qemu-nbd: add support for ACLs for TLS clients

2016-03-23 Thread Daniel P. Berrange
On Tue, Mar 22, 2016 at 12:14:27PM -0600, Eric Blake wrote: > On 03/10/2016 11:59 AM, Daniel P. Berrange wrote: > > Currently any client which can complete the TLS handshake > > is able to use the NBD server. The server admin can turn > > on the 'verify-peer' option for the x509 creds to require >

Re: [Qemu-devel] [PATCH v3 07/10] qemu-nbd: add support for ACLs for TLS clients

2016-03-22 Thread Eric Blake
On 03/10/2016 11:59 AM, Daniel P. Berrange wrote: > Currently any client which can complete the TLS handshake > is able to use the NBD server. The server admin can turn > on the 'verify-peer' option for the x509 creds to require > the client to provide a x509 certificate. This means the > client wi

[Qemu-devel] [PATCH v3 07/10] qemu-nbd: add support for ACLs for TLS clients

2016-03-10 Thread Daniel P. Berrange
Currently any client which can complete the TLS handshake is able to use the NBD server. The server admin can turn on the 'verify-peer' option for the x509 creds to require the client to provide a x509 certificate. This means the client will have to acquire a certificate from the CA before they are