mirror of
https://gitlab.com/libvirt/libvirt.git
synced 2025-01-22 04:25:18 +00:00
qemu: Add 'verify-peer=yes' test for chardev TCP TLS
Missing the option to set verify-peer to yes Signed-off-by: John Ferlan <jferlan@redhat.com>
This commit is contained in:
parent
a99d9082ac
commit
40b6f91900
@ -0,0 +1,33 @@
|
|||||||
|
LC_ALL=C \
|
||||||
|
PATH=/bin \
|
||||||
|
HOME=/home/test \
|
||||||
|
USER=test \
|
||||||
|
LOGNAME=test \
|
||||||
|
QEMU_AUDIO_DRV=none \
|
||||||
|
/usr/bin/qemu \
|
||||||
|
-name QEMUGuest1 \
|
||||||
|
-S \
|
||||||
|
-M pc \
|
||||||
|
-m 214 \
|
||||||
|
-smp 1,sockets=1,cores=1,threads=1 \
|
||||||
|
-uuid c7a5fdbd-edaf-9455-926a-d65c16db1809 \
|
||||||
|
-nographic \
|
||||||
|
-nodefconfig \
|
||||||
|
-nodefaults \
|
||||||
|
-chardev socket,id=charmonitor,path=/tmp/lib/domain--1-QEMUGuest1/monitor.sock,\
|
||||||
|
server,nowait \
|
||||||
|
-mon chardev=charmonitor,id=monitor,mode=readline \
|
||||||
|
-no-acpi \
|
||||||
|
-boot c \
|
||||||
|
-usb \
|
||||||
|
-drive file=/dev/HostVG/QEMUGuest1,format=raw,if=none,id=drive-ide0-0-0 \
|
||||||
|
-device ide-drive,bus=ide.0,unit=0,drive=drive-ide0-0-0,id=ide0-0-0 \
|
||||||
|
-chardev udp,id=charserial0,host=127.0.0.1,port=2222,localaddr=127.0.0.1,\
|
||||||
|
localport=1111 \
|
||||||
|
-device isa-serial,chardev=charserial0,id=serial0 \
|
||||||
|
-object tls-creds-x509,id=objserial1_tls0,dir=/etc/pki/libvirt-chardev,\
|
||||||
|
endpoint=client,verify-peer=yes \
|
||||||
|
-chardev socket,id=charserial1,host=127.0.0.1,port=5555,\
|
||||||
|
tls-creds=objserial1_tls0 \
|
||||||
|
-device isa-serial,chardev=charserial1,id=serial1 \
|
||||||
|
-device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3
|
@ -0,0 +1,41 @@
|
|||||||
|
<domain type='qemu'>
|
||||||
|
<name>QEMUGuest1</name>
|
||||||
|
<uuid>c7a5fdbd-edaf-9455-926a-d65c16db1809</uuid>
|
||||||
|
<memory unit='KiB'>219136</memory>
|
||||||
|
<currentMemory unit='KiB'>219136</currentMemory>
|
||||||
|
<vcpu placement='static'>1</vcpu>
|
||||||
|
<os>
|
||||||
|
<type arch='i686' machine='pc'>hvm</type>
|
||||||
|
<boot dev='hd'/>
|
||||||
|
</os>
|
||||||
|
<clock offset='utc'/>
|
||||||
|
<on_poweroff>destroy</on_poweroff>
|
||||||
|
<on_reboot>restart</on_reboot>
|
||||||
|
<on_crash>destroy</on_crash>
|
||||||
|
<devices>
|
||||||
|
<emulator>/usr/bin/qemu</emulator>
|
||||||
|
<disk type='block' device='disk'>
|
||||||
|
<source dev='/dev/HostVG/QEMUGuest1'/>
|
||||||
|
<target dev='hda' bus='ide'/>
|
||||||
|
<address type='drive' controller='0' bus='0' target='0' unit='0'/>
|
||||||
|
</disk>
|
||||||
|
<controller type='usb' index='0'/>
|
||||||
|
<controller type='ide' index='0'/>
|
||||||
|
<serial type='udp'>
|
||||||
|
<source mode='bind' host='127.0.0.1' service='1111'/>
|
||||||
|
<source mode='connect' host='127.0.0.1' service='2222'/>
|
||||||
|
<target port='0'/>
|
||||||
|
</serial>
|
||||||
|
<serial type='tcp'>
|
||||||
|
<source mode='connect' host='127.0.0.1' service='5555'/>
|
||||||
|
<protocol type='raw'/>
|
||||||
|
<target port='0'/>
|
||||||
|
</serial>
|
||||||
|
<console type='udp'>
|
||||||
|
<source mode='bind' host='127.0.0.1' service='1111'/>
|
||||||
|
<source mode='connect' host='127.0.0.1' service='2222'/>
|
||||||
|
<target type='serial' port='0'/>
|
||||||
|
</console>
|
||||||
|
<memballoon model='virtio'/>
|
||||||
|
</devices>
|
||||||
|
</domain>
|
@ -1162,6 +1162,11 @@ mymain(void)
|
|||||||
DO_TEST("serial-tcp-tlsx509-chardev",
|
DO_TEST("serial-tcp-tlsx509-chardev",
|
||||||
QEMU_CAPS_CHARDEV, QEMU_CAPS_NODEFCONFIG,
|
QEMU_CAPS_CHARDEV, QEMU_CAPS_NODEFCONFIG,
|
||||||
QEMU_CAPS_OBJECT_TLS_CREDS_X509);
|
QEMU_CAPS_OBJECT_TLS_CREDS_X509);
|
||||||
|
driver.config->chardevTLSx509verify = 1;
|
||||||
|
DO_TEST("serial-tcp-tlsx509-chardev-verify",
|
||||||
|
QEMU_CAPS_CHARDEV, QEMU_CAPS_NODEFCONFIG,
|
||||||
|
QEMU_CAPS_OBJECT_TLS_CREDS_X509);
|
||||||
|
driver.config->chardevTLSx509verify = 0;
|
||||||
driver.config->chardevTLS = 0;
|
driver.config->chardevTLS = 0;
|
||||||
VIR_FREE(driver.config->chardevTLSx509certdir);
|
VIR_FREE(driver.config->chardevTLSx509certdir);
|
||||||
DO_TEST("serial-many-chardev",
|
DO_TEST("serial-many-chardev",
|
||||||
|
Loading…
x
Reference in New Issue
Block a user