From: Eric Blake <eblake@redhat.com>
To: Alex Bligh <alex@alex.org.uk>,
"nbd-general@lists.sourceforge.net"
<nbd-general@lists.sourceforge.net>
Cc: Wouter Verhelst <w@uter.be>,
"Daniel P. Berrange" <berrange@redhat.com>,
"qemu-devel@nongnu.org" <qemu-devel@nongnu.org>
Subject: Re: [Qemu-devel] [PATCHv9] Improve documentation for TLS
Date: Tue, 12 Apr 2016 09:15:47 -0600 [thread overview]
Message-ID: <570D1123.9000101@redhat.com> (raw)
In-Reply-To: <1460467659-2208-1-git-send-email-alex@alex.org.uk>
[-- Attachment #1: Type: text/plain, Size: 1355 bytes --]
On 04/12/2016 07:27 AM, Alex Bligh wrote:
> * Call out TLS into a separate section
>
> * Add details of the TLS protocol itself
>
> * Emphasise that actual TLS session initiation (i.e. the TLS handshake) can
> be initiated from either side (as required by the TLS standard I believe
> and as actually works in practice)
>
> * Clarify what is a requirement on servers, and what is a requirement on
> clients, separately, specifying their behaviour in a single place
> in the document.
>
> * Document the three possible modes of operation of a server.
>
> * Add text defining what 'terminate the session' means during
> negotiation, and when it is available.
>
> Signed-off-by: Alex Bligh <alex@alex.org.uk>
> ---
> +#### SELECTIVETLS mode
> +
> +
> +There is a degenerate case of SELECTIVETLS where all
> +exports are TLS-only. This is permitted in part to make programming
> +of servers easier. Operation is a little different from FORCEDTLS,
> +as the client is not forced to upgrade to TLS prior to any options
> +being processed, and the server MAY choose to give information on
> +non-existent exports via NBD_OPT_INFO exports prior to an upgrade
s/exports prior/responses/
> +to TLS.
--
Eric Blake eblake redhat com +1-919-301-3266
Libvirt virtualization library http://libvirt.org
[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 604 bytes --]
next prev parent reply other threads:[~2016-04-12 15:15 UTC|newest]
Thread overview: 4+ messages / expand[flat|nested] mbox.gz Atom feed top
2016-04-12 13:27 [Qemu-devel] [PATCHv9] Improve documentation for TLS Alex Bligh
2016-04-12 15:15 ` Eric Blake [this message]
2016-04-12 18:22 ` Alex Bligh
2016-04-12 16:47 ` Eric Blake
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=570D1123.9000101@redhat.com \
--to=eblake@redhat.com \
--cc=alex@alex.org.uk \
--cc=berrange@redhat.com \
--cc=nbd-general@lists.sourceforge.net \
--cc=qemu-devel@nongnu.org \
--cc=w@uter.be \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.