• D
    Allow certificate sanity checking to be disabled · 07f9b6f0
    Daniel P. Berrange 提交于
    When libvirtd starts it it will sanity check its own certs,
    and before libvirt clients connect to a remote server they
    will sanity check their own certs. This patch allows such
    sanity checking to be skipped. There is no strong reason to
    need to do this, other than to bypass possible libvirt bugs
    in sanity checking, or for testing purposes.
    
    libvirt.conf gains tls_no_sanity_certificate parameter to
    go along with tls_no_verify_certificate. The remote driver
    client URIs gain a no_sanity URI parameter
    
    * daemon/test_libvirtd.aug, daemon/libvirtd.conf,
      daemon/libvirtd.c, daemon/libvirtd.aug: Add parameter to
      allow cert sanity checks to be skipped
    * src/remote/remote_driver.c: Add no_sanity parameter to
      skip cert checks
    * src/rpc/virnettlscontext.c, src/rpc/virnettlscontext.h:
      Add new parameter for skipping sanity checks independantly
      of skipping session cert validation checks
    07f9b6f0
libvirtd.conf 11.1 KB