From: Daniel P. Berrangé Date: Tue, 22 Jul 2025 10:35:36 +0000 (+0100) Subject: news: document new crypto TLS priority string settings X-Git-Tag: v11.6.0-rc1~66 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=02669921cb5c79f95e9efd2b5768e40fa0a4a390;p=thirdparty%2Flibvirt.git news: document new crypto TLS priority string settings Reviewed-by: Ján Tomko Signed-off-by: Daniel P. Berrangé --- diff --git a/NEWS.rst b/NEWS.rst index c7885f01a0..e5e8626729 100644 --- a/NEWS.rst +++ b/NEWS.rst @@ -24,6 +24,14 @@ v11.6.0 (unreleased) flag the baseline API would return reasonable output only when run on one of the hosts that the input CPU definitions were collected from. + * Allow control over QEMU TLS priority strings + + The qemu.conf file now has multiple settings allowing control over the + QEMU TLS priority strings, for the different subsystems in QEMU that + can support TLS. This can be used to workaround a current bug in GNUTLS + that is liable to cause crashes of the source QEMU when performing long + running live migration operations with TLS enabled. + * **Improvements** * qemu: Change default SCSI controller model to ``virtio-scsi`` for ARM and RISC-V