/openbmc/qemu/crypto/ |
H A D | tlscredsanon.c | 36 qcrypto_tls_creds_anon_load(QCryptoTLSCredsAnon *creds, in qcrypto_tls_creds_anon_load() argument 42 trace_qcrypto_tls_creds_anon_load(creds, in qcrypto_tls_creds_anon_load() 43 creds->parent_obj.dir ? creds->parent_obj.dir : "<nodir>"); in qcrypto_tls_creds_anon_load() 45 if (creds->parent_obj.endpoint == QCRYPTO_TLS_CREDS_ENDPOINT_SERVER) { in qcrypto_tls_creds_anon_load() 46 if (qcrypto_tls_creds_get_path(&creds->parent_obj, in qcrypto_tls_creds_anon_load() 52 ret = gnutls_anon_allocate_server_credentials(&creds->data.server); in qcrypto_tls_creds_anon_load() 59 if (qcrypto_tls_creds_get_dh_params_file(&creds->parent_obj, dhparams, in qcrypto_tls_creds_anon_load() 60 &creds->parent_obj.dh_params, in qcrypto_tls_creds_anon_load() 65 gnutls_anon_set_server_dh_params(creds->data.server, in qcrypto_tls_creds_anon_load() 66 creds->parent_obj.dh_params); in qcrypto_tls_creds_anon_load() [all …]
|
H A D | tlscredspsk.c | 71 qcrypto_tls_creds_psk_load(QCryptoTLSCredsPSK *creds, in qcrypto_tls_creds_psk_load() argument 81 trace_qcrypto_tls_creds_psk_load(creds, in qcrypto_tls_creds_psk_load() 82 creds->parent_obj.dir ? creds->parent_obj.dir : "<nodir>"); in qcrypto_tls_creds_psk_load() 84 if (creds->parent_obj.endpoint == QCRYPTO_TLS_CREDS_ENDPOINT_SERVER) { in qcrypto_tls_creds_psk_load() 85 if (creds->username) { in qcrypto_tls_creds_psk_load() 90 if (qcrypto_tls_creds_get_path(&creds->parent_obj, in qcrypto_tls_creds_psk_load() 93 qcrypto_tls_creds_get_path(&creds->parent_obj, in qcrypto_tls_creds_psk_load() 99 ret = gnutls_psk_allocate_server_credentials(&creds->data.server); in qcrypto_tls_creds_psk_load() 106 if (qcrypto_tls_creds_get_dh_params_file(&creds->parent_obj, dhparams, in qcrypto_tls_creds_psk_load() 107 &creds->parent_obj.dh_params, in qcrypto_tls_creds_psk_load() [all …]
|
H A D | trace-events | 4 qcrypto_tls_creds_load_dh(void *creds, const char *filename) "TLS creds load DH creds=%p filename=%… 5 qcrypto_tls_creds_get_path(void *creds, const char *filename, const char *path) "TLS creds path cre… 8 qcrypto_tls_creds_anon_load(void *creds, const char *dir) "TLS creds anon load creds=%p dir=%s" 11 qcrypto_tls_creds_psk_load(void *creds, const char *dir) "TLS creds psk load creds=%p dir=%s" 14 qcrypto_tls_creds_x509_load(void *creds, const char *dir) "TLS creds x509 load creds=%p dir=%s" 15 …x509_check_basic_constraints(void *creds, const char *file, int status) "TLS creds x509 check basi… 16 …x509_check_key_usage(void *creds, const char *file, int status, int usage, int critical) "TLS cred… 17 …heck_key_purpose(void *creds, const char *file, int status, const char *usage, int critical) "TLS … 18 qcrypto_tls_creds_x509_load_cert(void *creds, int isServer, const char *file) "TLS creds x509 load … 19 qcrypto_tls_creds_x509_load_cert_list(void *creds, const char *file) "TLS creds x509 load cert list… [all …]
|
H A D | tlscredsx509.c | 78 qcrypto_tls_creds_check_cert_basic_constraints(QCryptoTLSCredsX509 *creds, in qcrypto_tls_creds_check_cert_basic_constraints() argument 89 creds, certFile, status); in qcrypto_tls_creds_check_cert_basic_constraints() 130 qcrypto_tls_creds_check_cert_key_usage(QCryptoTLSCredsX509 *creds, in qcrypto_tls_creds_check_cert_key_usage() argument 142 creds, certFile, status, usage, critical); in qcrypto_tls_creds_check_cert_key_usage() 189 qcrypto_tls_creds_check_cert_key_purpose(QCryptoTLSCredsX509 *creds, in qcrypto_tls_creds_check_cert_key_purpose() argument 232 creds, certFile, status, "<none>", purposeCritical); in qcrypto_tls_creds_check_cert_key_purpose() 240 creds, certFile, status, buffer, purposeCritical); in qcrypto_tls_creds_check_cert_key_purpose() 282 qcrypto_tls_creds_check_cert(QCryptoTLSCredsX509 *creds, in qcrypto_tls_creds_check_cert() argument 295 if (qcrypto_tls_creds_check_cert_basic_constraints(creds, in qcrypto_tls_creds_check_cert() 302 if (qcrypto_tls_creds_check_cert_key_usage(creds, in qcrypto_tls_creds_check_cert() [all …]
|
H A D | tlscreds.c | 32 qcrypto_tls_creds_get_dh_params_file(QCryptoTLSCreds *creds, in qcrypto_tls_creds_get_dh_params_file() argument 39 trace_qcrypto_tls_creds_load_dh(creds, filename ? filename : "<generated>"); in qcrypto_tls_creds_get_dh_params_file() 97 qcrypto_tls_creds_get_path(QCryptoTLSCreds *creds, in qcrypto_tls_creds_get_path() argument 106 if (!creds->dir) { in qcrypto_tls_creds_get_path() 115 *cred = g_strdup_printf("%s/%s", creds->dir, filename); in qcrypto_tls_creds_get_path() 132 trace_qcrypto_tls_creds_get_path(creds, filename, in qcrypto_tls_creds_get_path() 146 QCryptoTLSCreds *creds = QCRYPTO_TLS_CREDS(obj); in qcrypto_tls_creds_prop_set_verify() local 148 creds->verifyPeer = value; in qcrypto_tls_creds_prop_set_verify() 156 QCryptoTLSCreds *creds = QCRYPTO_TLS_CREDS(obj); in qcrypto_tls_creds_prop_get_verify() local 158 return creds->verifyPeer; in qcrypto_tls_creds_prop_get_verify() [all …]
|
H A D | tlssession.c | 38 QCryptoTLSCreds *creds; member 71 object_unref(OBJECT(session->creds)); in qcrypto_tls_session_free() 133 qcrypto_tls_session_new(QCryptoTLSCreds *creds, in qcrypto_tls_session_new() argument 144 session, creds, hostname ? hostname : "<none>", in qcrypto_tls_session_new() 153 session->creds = creds; in qcrypto_tls_session_new() 154 object_ref(OBJECT(creds)); in qcrypto_tls_session_new() 156 if (creds->endpoint != endpoint) { in qcrypto_tls_session_new() 172 if (object_dynamic_cast(OBJECT(creds), in qcrypto_tls_session_new() 174 QCryptoTLSCredsAnon *acreds = QCRYPTO_TLS_CREDS_ANON(creds); in qcrypto_tls_session_new() 177 if (creds->priority != NULL) { in qcrypto_tls_session_new() [all …]
|
H A D | tls-cipher-suites.c | 37 QCryptoTLSCreds *creds = QCRYPTO_TLS_CREDS(obj); in qcrypto_tls_cipher_suites_get_data() local 44 trace_qcrypto_tls_cipher_suite_priority(creds->priority); in qcrypto_tls_cipher_suites_get_data() 45 ret = gnutls_priority_init(&pcache, creds->priority, &err); in qcrypto_tls_cipher_suites_get_data() 48 creds->priority, gnutls_strerror(ret)); in qcrypto_tls_cipher_suites_get_data() 90 QCryptoTLSCreds *creds = QCRYPTO_TLS_CREDS(uc); in qcrypto_tls_cipher_suites_complete() local 92 if (!creds->priority) { in qcrypto_tls_cipher_suites_complete()
|
H A D | tlscredspriv.h | 73 int qcrypto_tls_creds_get_path(QCryptoTLSCreds *creds, 79 int qcrypto_tls_creds_get_dh_params_file(QCryptoTLSCreds *creds,
|
H A D | secret_common.c | 199 QCryptoSecretCommon *creds = QCRYPTO_SECRET_COMMON(obj); in qcrypto_secret_prop_set_format() local 200 creds->format = value; in qcrypto_secret_prop_set_format() 208 QCryptoSecretCommon *creds = QCRYPTO_SECRET_COMMON(obj); in qcrypto_secret_prop_get_format() local 209 return creds->format; in qcrypto_secret_prop_get_format()
|
/openbmc/qemu/tests/qemu-iotests/ |
H A D | 233 | 76 obj=tls-creds-x509,dir=${tls_dir}/client1,endpoint=client,id=tls0 78 driver=nbd,host=$nbd_tcp_addr,port=$nbd_tcp_port,tls-creds=tls0 \ 81 --tls-creds=tls0 2>&1 | _filter_qemu_nbd_exports 89 --object tls-creds-x509,dir=${tls_dir}/server1,endpoint=server,id=tls0,verify-peer=on \ 90 --tls-creds tls0 \ 100 obj1=tls-creds-x509,dir=${tls_dir}/client1,endpoint=client,id=tls0 101 obj2=tls-creds-x509,dir=${tls_dir}/client3,endpoint=client,id=tls0 103 driver=nbd,host=$nbd_tcp_addr,port=$nbd_tcp_port,tls-creds=tls0 \ 106 driver=nbd,host=$nbd_tcp_addr,port=$nbd_tcp_port,tls-creds=tls0 \ 109 --tls-creds=tls0 2>&1 | _filter_qemu_nbd_exports [all …]
|
H A D | 233.out | 3 == preparing TLS creds == 19 qemu-img: Could not open 'driver=nbd,host=127.0.0.1,port=PORT,tls-creds=tls0': Denied by server for… 25 Did you forget a valid tls-creds? 45 qemu-img: Could not open 'driver=nbd,host=localhost,port=PORT,tls-creds=tls0': Certificate does not… 60 qemu-img: Could not open 'driver=nbd,host=127.0.0.1,port=PORT,tls-creds=tls0': The certificate hasn… 72 qemu-img: Could not open 'driver=nbd,host=127.0.0.1,port=PORT,tls-creds=tls0': Failed to read optio… 73 qemu-img: Could not open 'driver=nbd,host=127.0.0.1,port=PORT,tls-creds=tls0': Failed to read optio… 76 qemu-img: Could not open 'driver=nbd,path=SOCK_DIR/qemu-nbd.sock,tls-creds=tls0': No hostname for c… 102 qemu-img: Could not open 'driver=nbd,path=SOCK_DIR/qemu-nbd.sock,tls-creds=tls0': TLS handshake fai…
|
/openbmc/qemu/migration/ |
H A D | tls.c | 34 Object *creds; in migration_tls_get_creds() local 38 creds = object_resolve_path_component(object_get_objects_root(), tls_creds); in migration_tls_get_creds() 39 if (!creds) { in migration_tls_get_creds() 44 creds, TYPE_QCRYPTO_TLS_CREDS); in migration_tls_get_creds() 78 QCryptoTLSCreds *creds; in migration_tls_channel_process_incoming() local 81 creds = migration_tls_get_creds(QCRYPTO_TLS_CREDS_ENDPOINT_SERVER, errp); in migration_tls_channel_process_incoming() 82 if (!creds) { in migration_tls_channel_process_incoming() 86 tioc = qio_channel_tls_new_server(ioc, creds, migrate_tls_authz(), errp); in migration_tls_channel_process_incoming() 121 QCryptoTLSCreds *creds; in migration_tls_client_create() local 123 creds = migration_tls_get_creds(QCRYPTO_TLS_CREDS_ENDPOINT_CLIENT, errp); in migration_tls_client_create() [all …]
|
/openbmc/linux/net/core/ |
H A D | scm.c | 46 static __inline__ int scm_check_creds(struct ucred *creds) in scm_check_creds() argument 49 kuid_t uid = make_kuid(cred->user_ns, creds->uid); in scm_check_creds() 50 kgid_t gid = make_kgid(cred->user_ns, creds->gid); in scm_check_creds() 55 if ((creds->pid == task_tgid_vnr(current) || in scm_check_creds() 171 struct ucred creds; in __scm_send() local 176 memcpy(&creds, CMSG_DATA(cmsg), sizeof(struct ucred)); in __scm_send() 177 err = scm_check_creds(&creds); in __scm_send() 181 p->creds.pid = creds.pid; in __scm_send() 182 if (!p->pid || pid_vnr(p->pid) != creds.pid) { in __scm_send() 185 pid = find_get_pid(creds.pid); in __scm_send() [all …]
|
/openbmc/linux/include/net/ |
H A D | scm.h | 35 struct scm_creds creds; /* Skb credentials */ member 61 scm->creds.pid = pid_vnr(pid); in scm_set_cred() 62 scm->creds.uid = uid; in scm_set_cred() 63 scm->creds.gid = gid; in scm_set_cred() 83 scm->creds.uid = INVALID_UID; in scm_send() 84 scm->creds.gid = INVALID_GID; in scm_send() 175 .pid = scm->creds.pid, in __scm_recv_common() 176 .uid = from_kuid_munged(current_ns, scm->creds.uid), in __scm_recv_common() 177 .gid = from_kgid_munged(current_ns, scm->creds.gid), in __scm_recv_common()
|
/openbmc/linux/net/sunrpc/auth_gss/ |
H A D | gss_rpc_xdr.c | 169 struct svc_cred *creds) in gssx_dec_linux_creds() argument 190 creds->cr_uid = make_kuid(&init_user_ns, tmp); in gssx_dec_linux_creds() 196 creds->cr_gid = make_kgid(&init_user_ns, tmp); in gssx_dec_linux_creds() 205 creds->cr_group_info = groups_alloc(N); in gssx_dec_linux_creds() 206 if (creds->cr_group_info == NULL) in gssx_dec_linux_creds() 219 creds->cr_group_info->gid[i] = kgid; in gssx_dec_linux_creds() 221 groups_sort(creds->cr_group_info); in gssx_dec_linux_creds() 225 groups_free(creds->cr_group_info); in gssx_dec_linux_creds() 232 struct svc_cred *creds; in gssx_dec_option_array() local 251 creds = kzalloc(sizeof(struct svc_cred), GFP_KERNEL); in gssx_dec_option_array() [all …]
|
H A D | gss_rpc_upcall.c | 339 data->creds = *(struct svc_cred *)value->data; in gssp_accept_sec_context_upcall() 353 data->creds.cr_raw_principal = in gssp_accept_sec_context_upcall() 355 data->creds.cr_principal = in gssp_accept_sec_context_upcall() 357 gssp_hostbased_service(&data->creds.cr_principal); in gssp_accept_sec_context_upcall() 360 data->creds.cr_targ_princ = in gssp_accept_sec_context_upcall() 362 gssp_hostbased_service(&data->creds.cr_targ_princ); in gssp_accept_sec_context_upcall() 376 free_svc_cred(&data->creds); in gssp_free_upcall_data()
|
/openbmc/linux/drivers/soc/bcm/brcmstb/ |
H A D | biuctrl.c | 116 u32 creds = 0; in mcp_write_pairing_set() local 121 creds = cbc_readl(CPU_CREDIT_REG); in mcp_write_pairing_set() 124 cbc_writel(creds | CPU_CREDIT_REG_MCPx_WR_PAIRING_EN_MASK, in mcp_write_pairing_set() 126 } else if (creds & CPU_CREDIT_REG_MCPx_WR_PAIRING_EN_MASK) { in mcp_write_pairing_set() 128 cbc_writel(creds & ~CPU_CREDIT_REG_MCPx_WR_PAIRING_EN_MASK, in mcp_write_pairing_set()
|
/openbmc/qemu/tests/unit/ |
H A D | test-crypto-tlscredsx509.c | 44 Object *creds = object_new_with_props( in test_tls_creds_create() local 56 if (!creds) { in test_tls_creds_create() 59 return QCRYPTO_TLS_CREDS(creds); in test_tls_creds_create() 75 QCryptoTLSCreds *creds; in test_tls_creds() local 109 creds = test_tls_creds_create( in test_tls_creds() 117 g_assert(creds == NULL); in test_tls_creds() 119 g_assert(creds != NULL); in test_tls_creds() 131 if (creds) { in test_tls_creds() 132 object_unparent(OBJECT(creds)); in test_tls_creds()
|
/openbmc/qemu/ |
H A D | blockdev-nbd.c | 138 QCryptoTLSCreds *creds; in nbd_get_tls_creds() local 147 creds = (QCryptoTLSCreds *) in nbd_get_tls_creds() 149 if (!creds) { in nbd_get_tls_creds() 155 if (!qcrypto_tls_creds_check_endpoint(creds, in nbd_get_tls_creds() 161 return creds; in nbd_get_tls_creds()
|
/openbmc/linux/arch/powerpc/platforms/pseries/ |
H A D | vas-sysfs.c | 36 u16 creds; in update_total_credits_store() local 38 err = kstrtou16(buf, 0, &creds); in update_total_credits_store() 48 err = vas_reconfig_capabilties(caps->win_type, creds); in update_total_credits_store() 53 pr_info("Set QoS total credits %u\n", creds); in update_total_credits_store()
|
/openbmc/qemu/tests/qemu-iotests/tests/ |
H A D | nbd-tls-iothread.out | 3 == preparing TLS creds and spare port == 27 "tls-creds": "tls0"}} 39 "export": "drive_image1", "tls-creds": "tls0",
|
/openbmc/qemu/include/io/ |
H A D | channel-tls.h | 80 QCryptoTLSCreds *creds, 110 QCryptoTLSCreds *creds,
|
/openbmc/qemu/docs/system/ |
H A D | vnc-security.rst | 68 -object tls-creds-x509,id=tls0,dir=/etc/pki/qemu,endpoint=server,verify-peer=off \ 69 -vnc :1,tls-creds=tls0 -monitor stdio 92 -object tls-creds-x509,id=tls0,dir=/etc/pki/qemu,endpoint=server,verify-peer=on \ 93 -vnc :1,tls-creds=tls0 -monitor stdio 106 -object tls-creds-x509,id=tls0,dir=/etc/pki/qemu,endpoint=server,verify-peer=on \ 107 -vnc :1,tls-creds=tls0,password=on -monitor stdio 148 -object tls-creds-x509,id=tls0,dir=/etc/pki/qemu,endpoint=server,verify-peer=on \ 149 -vnc :1,tls-creds=tls0,sasl=on -monitor stdio
|
/openbmc/qemu/io/ |
H A D | channel-tls.c | 66 QCryptoTLSCreds *creds, in qio_channel_tls_new_server() argument 84 creds, in qio_channel_tls_new_server() 99 trace_qio_channel_tls_new_server(tioc, master, creds, aclname); in qio_channel_tls_new_server() 109 QCryptoTLSCreds *creds, in qio_channel_tls_new_client() argument 127 creds, in qio_channel_tls_new_client() 142 trace_qio_channel_tls_new_client(tioc, master, creds, hostname); in qio_channel_tls_new_client()
|
/openbmc/qemu/docs/tools/ |
H A D | qemu-nbd.rst | 40 keys, and the ``tls-creds`` object, which is used to supply TLS 164 .. option:: --tls-creds=ID 236 --object tls-creds-x509,id=tls0,endpoint=server,dir=/path/to/qemutls \ 239 --tls-creds tls0 --tls-authz auth0 \ 273 --object tls-creds-psk,id=tls0,dir=/tmp/keys,username=eblake,endpoint=client \ 274 --tls-creds tls0 -L -b remote.example.com
|