mbox

[PULL,00/11] Crypto patches

Message ID 20240724094706.30396-1-berrange@redhat.com
State New
Headers show

Pull-request

https://gitlab.com/berrange/qemu tags/misc-fixes-pull-request

Message

Daniel P. Berrangé July 24, 2024, 9:46 a.m. UTC
The following changes since commit 6410f877f5ed535acd01bbfaa4baec379e44d0ef:

  Merge tag 'hw-misc-20240723' of https://github.com/philmd/qemu into staging (2024-07-24 15:39:43 +1000)

are available in the Git repository at:

  https://gitlab.com/berrange/qemu tags/misc-fixes-pull-request

for you to fetch changes up to 97f7bf113eb50fcdaf0c73aa2ee01e5355abc073:

  crypto: propagate errors from TLS session I/O callbacks (2024-07-24 10:39:10 +0100)

----------------------------------------------------------------

* Drop unused 'detached-header' QAPI field from LUKS create options
* Improve tracing of TLS sockets and TLS chardevs
* Improve error messages from TLS I/O failures
* Add docs about use of LUKS detached header options
* Allow building without libtasn1, but with GNUTLS
* Fix detection of libgcrypt when libgcrypt-config is absent

----------------------------------------------------------------

Daniel P. Berrangé (6):
  qapi: drop unused QCryptoBlockCreateOptionsLUKS.detached-header
  meson: build chardev trace files when have_block
  chardev: add tracing of socket error conditions
  crypto: drop gnutls debug logging support
  crypto: push error reporting into TLS session I/O APIs
  crypto: propagate errors from TLS session I/O callbacks

Hyman Huang (1):
  docs/devel: Add introduction to LUKS volume with detached header

Philippe Mathieu-Daudé (3):
  crypto: Remove 'crypto-tls-x509-helpers.h' from
    crypto-tls-psk-helpers.c
  crypto: Restrict pkix_asn1_tab[] to crypto-tls-x509-helpers.c
  crypto: Allow building with GnuTLS but without Libtasn1

Yao Zi (1):
  meson.build: fix libgcrypt detection on system without
    libgcrypt-config

 MAINTAINERS                                   |   3 +-
 chardev/char-socket.c                         |  37 ++--
 chardev/trace-events                          |  10 +
 crypto/init.c                                 |  15 +-
 crypto/tlssession.c                           | 124 ++++++++----
 docs/devel/crypto.rst                         |  10 +
 docs/devel/index-internals.rst                |   1 +
 docs/devel/luks-detached-header.rst           | 182 ++++++++++++++++++
 include/crypto/tlssession.h                   |  33 +++-
 io/channel-tls.c                              |  66 +++----
 meson.build                                   |   4 +-
 qapi/crypto.json                              |   5 +-
 tests/qtest/meson.build                       |   3 +-
 tests/unit/crypto-tls-psk-helpers.c           |   1 -
 tests/unit/crypto-tls-x509-helpers.c          |   6 +-
 tests/unit/crypto-tls-x509-helpers.h          |   3 -
 tests/unit/meson.build                        |   6 +-
 .../{pkix_asn1_tab.c => pkix_asn1_tab.c.inc}  |   5 +-
 tests/unit/test-crypto-tlssession.c           |  30 ++-
 19 files changed, 418 insertions(+), 126 deletions(-)
 create mode 100644 docs/devel/crypto.rst
 create mode 100644 docs/devel/luks-detached-header.rst
 rename tests/unit/{pkix_asn1_tab.c => pkix_asn1_tab.c.inc} (99%)

Comments

Richard Henderson July 24, 2024, 11:53 p.m. UTC | #1
On 7/24/24 19:46, Daniel P. Berrangé wrote:
> The following changes since commit 6410f877f5ed535acd01bbfaa4baec379e44d0ef:
> 
>    Merge tag 'hw-misc-20240723' ofhttps://github.com/philmd/qemu into staging (2024-07-24 15:39:43 +1000)
> 
> are available in the Git repository at:
> 
>    https://gitlab.com/berrange/qemu tags/misc-fixes-pull-request
> 
> for you to fetch changes up to 97f7bf113eb50fcdaf0c73aa2ee01e5355abc073:
> 
>    crypto: propagate errors from TLS session I/O callbacks (2024-07-24 10:39:10 +0100)
> 
> ----------------------------------------------------------------
> 
> * Drop unused 'detached-header' QAPI field from LUKS create options
> * Improve tracing of TLS sockets and TLS chardevs
> * Improve error messages from TLS I/O failures
> * Add docs about use of LUKS detached header options
> * Allow building without libtasn1, but with GNUTLS
> * Fix detection of libgcrypt when libgcrypt-config is absent

Applied, thanks.  Please update https://wiki.qemu.org/ChangeLog/9.1 as appropriate.

r~