[libvirt] [PATCH 21/38] qemu: domain: Separate setup of TLS for VXHS disks from qemuDomainPrepareDiskSourceTLS

Peter Krempa posted 38 patches 6 years, 11 months ago
[libvirt] [PATCH 21/38] qemu: domain: Separate setup of TLS for VXHS disks from qemuDomainPrepareDiskSourceTLS
Posted by Peter Krempa 6 years, 11 months ago
Split out the code into a separate function so that all steps for a
storage protocol are contained and the original function is easily
extendable.

Signed-off-by: Peter Krempa <pkrempa@redhat.com>
---
 src/qemu/qemu_domain.c | 51 ++++++++++++++++++++++++++++----------------------
 1 file changed, 29 insertions(+), 22 deletions(-)

diff --git a/src/qemu/qemu_domain.c b/src/qemu/qemu_domain.c
index 15c2e28604..a4499e7916 100644
--- a/src/qemu/qemu_domain.c
+++ b/src/qemu/qemu_domain.c
@@ -9911,6 +9911,32 @@ qemuDomainPrepareChardevSource(virDomainDefPtr def,
 }


+static int
+qemuProcessPrepareStorageSourceTlsVxhs(virStorageSourcePtr src,
+                                       virQEMUDriverConfigPtr cfg)
+{
+    /* VxHS uses only client certificates and thus has no need for
+     * the server-key.pem nor a secret that could be used to decrypt
+     * the it, so no need to add a secinfo for a secret UUID. */
+    if (src->haveTLS == VIR_TRISTATE_BOOL_ABSENT) {
+        if (cfg->vxhsTLS)
+            src->haveTLS = VIR_TRISTATE_BOOL_YES;
+        else
+            src->haveTLS = VIR_TRISTATE_BOOL_NO;
+        src->tlsFromConfig = true;
+    }
+
+    if (src->haveTLS == VIR_TRISTATE_BOOL_YES) {
+        if (VIR_STRDUP(src->tlsCertdir, cfg->vxhsTLSx509certdir) < 0)
+            return -1;
+
+        src->tlsVerify = true;
+    }
+
+    return 0;
+}
+
+
 /* qemuProcessPrepareDiskSourceTLS:
  * @source: pointer to host interface data for disk device
  * @cfg: driver configuration
@@ -9928,29 +9954,10 @@ qemuDomainPrepareDiskSourceTLS(virStorageSourcePtr src,
     virStorageSourcePtr next;

     for (next = src; virStorageSourceIsBacking(next); next = next->backingStore) {
-        /* VxHS uses only client certificates and thus has no need for
-         * the server-key.pem nor a secret that could be used to decrypt
-         * the it, so no need to add a secinfo for a secret UUID. */
         if (next->type == VIR_STORAGE_TYPE_NETWORK &&
-            next->protocol == VIR_STORAGE_NET_PROTOCOL_VXHS) {
-
-            if (next->haveTLS == VIR_TRISTATE_BOOL_ABSENT) {
-                if (cfg->vxhsTLS)
-                    next->haveTLS = VIR_TRISTATE_BOOL_YES;
-                else
-                    next->haveTLS = VIR_TRISTATE_BOOL_NO;
-                next->tlsFromConfig = true;
-            }
-
-            if (next->haveTLS == VIR_TRISTATE_BOOL_YES) {
-                /* Grab the vxhsTLSx509certdir and set the verify/listen values.
-                 * NB: tlsAlias filled in during qemuDomainGetTLSObjects. */
-                if (VIR_STRDUP(next->tlsCertdir, cfg->vxhsTLSx509certdir) < 0)
-                    return -1;
-
-                next->tlsVerify = true;
-            }
-        }
+            next->protocol == VIR_STORAGE_NET_PROTOCOL_VXHS &&
+            qemuProcessPrepareStorageSourceTlsVxhs(next, cfg) < 0)
+            return -1;
     }

     return 0;
-- 
2.16.2

--
libvir-list mailing list
libvir-list@redhat.com
https://www.redhat.com/mailman/listinfo/libvir-list
Re: [libvirt] [PATCH 21/38] qemu: domain: Separate setup of TLS for VXHS disks from qemuDomainPrepareDiskSourceTLS
Posted by Ján Tomko 6 years, 11 months ago
On Wed, May 30, 2018 at 02:41:17PM +0200, Peter Krempa wrote:
>Split out the code into a separate function so that all steps for a
>storage protocol are contained and the original function is easily
>extendable.
>
>Signed-off-by: Peter Krempa <pkrempa@redhat.com>
>---
> src/qemu/qemu_domain.c | 51 ++++++++++++++++++++++++++++----------------------
> 1 file changed, 29 insertions(+), 22 deletions(-)
>
>diff --git a/src/qemu/qemu_domain.c b/src/qemu/qemu_domain.c
>index 15c2e28604..a4499e7916 100644
>--- a/src/qemu/qemu_domain.c
>+++ b/src/qemu/qemu_domain.c
>@@ -9911,6 +9911,32 @@ qemuDomainPrepareChardevSource(virDomainDefPtr def,
> }
>
>
>+static int
>+qemuProcessPrepareStorageSourceTlsVxhs(virStorageSourcePtr src,

TLS would be nicer.

Reviewed-by: Ján Tomko <jtomko@redhat.com>

Jano
--
libvir-list mailing list
libvir-list@redhat.com
https://www.redhat.com/mailman/listinfo/libvir-list