]> git.ipfire.org Git - thirdparty/libvirt.git/commitdiff
qemu: conf: Clarify default of "vnc_tls_x509_verify"
authorPeter Krempa <pkrempa@redhat.com>
Fri, 13 Nov 2020 14:18:37 +0000 (15:18 +0100)
committerPeter Krempa <pkrempa@redhat.com>
Mon, 16 Nov 2020 13:11:56 +0000 (14:11 +0100)
If both "vnc_tls_x509_verify" and "default_tls_x509_verify" are missing
from the config file the client certificate validation is disabled. VNC
provides a layer of authentication so client certificate validation is
not strictly required.

Signed-off-by: Peter Krempa <pkrempa@redhat.com>
Reviewed-by: Michal Privoznik <mprivozn@redhat.com>
src/qemu/qemu.conf

index 6f9d940477eb131e5a7abe47f38f45d1dfd1136b..6558e6dbfe0b5a685d7c111d9ea74a2501cdd3e2 100644 (file)
 # CA in the vnc_tls_x509_cert_dir (or default_tls_x509_cert_dir).
 #
 # If this option is not supplied, it will be set to the value of
-# "default_tls_x509_verify".
+# "default_tls_x509_verify". If "default_tls_x509_verify" is not supplied either,
+# the default is "0".
 #
 #vnc_tls_x509_verify = 1