From: Peter Krempa <pkrempa@redhat.com>
Date: Fri, 13 Nov 2020 14:18:37 +0000 (+0100)
Subject: qemu: conf: Clarify default of "vnc_tls_x509_verify"
X-Git-Tag: v6.10.0-rc1~148
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=940ef34443946f2a92cc00195f4135aec822e348;p=thirdparty%2Flibvirt.git

qemu: conf: Clarify default of "vnc_tls_x509_verify"

If both "vnc_tls_x509_verify" and "default_tls_x509_verify" are missing
from the config file the client certificate validation is disabled. VNC
provides a layer of authentication so client certificate validation is
not strictly required.

Signed-off-by: Peter Krempa <pkrempa@redhat.com>
Reviewed-by: Michal Privoznik <mprivozn@redhat.com>
---

diff --git a/src/qemu/qemu.conf b/src/qemu/qemu.conf
index 6f9d940477..6558e6dbfe 100644
--- a/src/qemu/qemu.conf
+++ b/src/qemu/qemu.conf
@@ -119,7 +119,8 @@
 # CA in the vnc_tls_x509_cert_dir (or default_tls_x509_cert_dir).
 #
 # If this option is not supplied, it will be set to the value of
-# "default_tls_x509_verify".
+# "default_tls_x509_verify". If "default_tls_x509_verify" is not supplied either,
+# the default is "0".
 #
 #vnc_tls_x509_verify = 1