[libvirt] [PATCH v2 00/14] Add TLS support for migration

[Jiri Denemark]

On Wed, Mar 01, 2017 at 12:57:13 +0100, Jiri Denemark wrote:
> On Tue, Feb 28, 2017 at 11:07:21 -0500, John Ferlan wrote:
> > On 02/28/2017 08:48 AM, Jiri Denemark wrote:
> > > The code should check whether QEMU actually supports TLS migration,
> > > otherwise you will get
> > > 
> > >     internal error: unable to execute QEMU command
> > >     'migrate-set-parameters': Invalid parameter 'tls-creds'
> > > 
> > 
> > Hmm...  I see tls-creds added to migrate-set-parameters in 2.7 while
> > they were added to ChardevSocket in 2.6... Ugh.  Have to refresh my
> > recollection of how to get the answer I need from capabilities.
> 
> query-migrate-parameters used by qemuMonitorJSONGetMigrationParams is
> your friend. And that's the reason why I said you actually might need
> the *_set variables.

Oh, but you can't use query-migrate-parameters because the TLS
parameters are not reported when they are not set. This looks like
another thing which needs to be fixed in QEMU.

Jirka