From patchwork Thu May 23 03:38:08 2013 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Fam Zheng X-Patchwork-Id: 245819 Return-Path: X-Original-To: incoming@patchwork.ozlabs.org Delivered-To: patchwork-incoming@bilbo.ozlabs.org Received: from lists.gnu.org (lists.gnu.org [208.118.235.17]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (Client did not present a certificate) by ozlabs.org (Postfix) with ESMTPS id A6BA32C0090 for ; Thu, 23 May 2013 13:43:31 +1000 (EST) Received: from localhost ([::1]:33754 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1UfMR7-0005Xw-Sr for incoming@patchwork.ozlabs.org; Wed, 22 May 2013 23:43:29 -0400 Received: from eggs.gnu.org ([208.118.235.92]:52203) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1UfMN7-0006ov-6q for qemu-devel@nongnu.org; Wed, 22 May 2013 23:39:27 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1UfMN1-0004JH-2V for qemu-devel@nongnu.org; Wed, 22 May 2013 23:39:21 -0400 Received: from mx1.redhat.com ([209.132.183.28]:49570) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1UfMN0-0004JB-KX for qemu-devel@nongnu.org; Wed, 22 May 2013 23:39:15 -0400 Received: from int-mx09.intmail.prod.int.phx2.redhat.com (int-mx09.intmail.prod.int.phx2.redhat.com [10.5.11.22]) by mx1.redhat.com (8.14.4/8.14.4) with ESMTP id r4N3dEXn026120 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK) for ; Wed, 22 May 2013 23:39:14 -0400 Received: from localhost.nay.redhat.com ([10.66.7.14]) by int-mx09.intmail.prod.int.phx2.redhat.com (8.14.4/8.14.4) with ESMTP id r4N3cFSS024477; Wed, 22 May 2013 23:39:09 -0400 From: Fam Zheng To: qemu-devel@nongnu.org Date: Thu, 23 May 2013 11:38:08 +0800 Message-Id: <1369280289-20928-11-git-send-email-famz@redhat.com> In-Reply-To: <1369280289-20928-1-git-send-email-famz@redhat.com> References: <1369280289-20928-1-git-send-email-famz@redhat.com> X-Scanned-By: MIMEDefang 2.68 on 10.5.11.22 X-detected-operating-system: by eggs.gnu.org: GNU/Linux 3.x X-Received-From: 209.132.183.28 Cc: kwolf@redhat.com, jcody@redhat.com, Fam Zheng , stefanha@redhat.com Subject: [Qemu-devel] [PATCH v5 10/11] curl: introduce ssl_no_cert runtime option. X-BeenThere: qemu-devel@nongnu.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: qemu-devel-bounces+incoming=patchwork.ozlabs.org@nongnu.org Sender: qemu-devel-bounces+incoming=patchwork.ozlabs.org@nongnu.org Added an option to let curl disable ssl certificate check. Signed-off-by: Fam Zheng --- block/curl.c | 12 +++++++++++- 1 file changed, 11 insertions(+), 1 deletion(-) diff --git a/block/curl.c b/block/curl.c index 5adbc84..b6cc5a0 100644 --- a/block/curl.c +++ b/block/curl.c @@ -95,6 +95,8 @@ typedef struct BDRVCURLState { int cache_quota; /* Whether http server accept range in header */ bool accept_range; + /* Whether certificated ssl only */ + bool ssl_no_cert; } BDRVCURLState; static void curl_clean_state(CURLState *s); @@ -339,6 +341,8 @@ static CURLState *curl_init_state(BDRVCURLState *s) curl_easy_setopt(state->curl, CURLOPT_NOSIGNAL, 1); curl_easy_setopt(state->curl, CURLOPT_ERRORBUFFER, state->errmsg); curl_easy_setopt(state->curl, CURLOPT_FAILONERROR, 1); + curl_easy_setopt(state->curl, CURLOPT_SSL_VERIFYPEER, + s->ssl_no_cert ? 0 : 1); /* Restrict supported protocols to avoid security issues in the more * obscure protocols. For example, do not allow POP3/SMTP/IMAP see @@ -429,7 +433,12 @@ static QemuOptsList runtime_opts = { .type = QEMU_OPT_SIZE, .help = "Readahead size", }, - { /* end of list */ } + { + .name = "ssl_no_cert", + .type = QEMU_OPT_BOOL, + .help = "SSL certificate check", + }, + { /* End of list */ } }, }; @@ -467,6 +476,7 @@ static int curl_open(BlockDriverState *bs, QDict *options, int flags) goto out_noclean; } + s->ssl_no_cert = qemu_opt_get_bool(opts, "ssl_no_cert", true); if (!inited) { curl_global_init(CURL_GLOBAL_ALL); inited = 1;