| 1 | QA output created by 233 |
| 2 | |
| 3 | == preparing TLS creds == |
| 4 | Generating a self signed certificate... |
| 5 | Generating a self signed certificate... |
| 6 | Generating a signed certificate... |
| 7 | Generating a signed certificate... |
| 8 | Generating a signed certificate... |
| 9 | Generating a signed certificate... |
| 10 | Generating a random key for user 'psk1' |
| 11 | Generating a random key for user 'psk2' |
| 12 | |
| 13 | == preparing image == |
| 14 | Formatting 'TEST_DIR/t.IMGFMT', fmt=IMGFMT size=67108864 |
| 15 | wrote 1048576/1048576 bytes at offset 1048576 |
| 16 | 1 MiB, X ops; XX:XX:XX.X (XXX YYY/sec and XXX ops/sec) |
| 17 | |
| 18 | == check TLS client to plain server fails == |
| 19 | qemu-img: Could not open 'driver=nbd,host=127.0.0.1,port=PORT,tls-creds=tls0': Denied by server for option 5 (starttls) |
| 20 | server reported: TLS not configured |
| 21 | qemu-nbd: Denied by server for option 5 (starttls) |
| 22 | |
| 23 | == check plain client to TLS server fails == |
| 24 | qemu-img: Could not open 'nbd://localhost:PORT': TLS negotiation required before option 7 (go) |
| 25 | Did you forget a valid tls-creds? |
| 26 | server reported: Option 0x7 not permitted before TLS |
| 27 | qemu-nbd: TLS negotiation required before option 3 (list) |
| 28 | |
| 29 | == check TLS works == |
| 30 | image: nbd://127.0.0.1:PORT |
| 31 | file format: nbd |
| 32 | virtual size: 64 MiB (67108864 bytes) |
| 33 | disk size: unavailable |
| 34 | image: nbd://127.0.0.1:PORT |
| 35 | file format: nbd |
| 36 | virtual size: 64 MiB (67108864 bytes) |
| 37 | disk size: unavailable |
| 38 | exports available: 1 |
| 39 | export: '' |
| 40 | size: 67108864 |
| 41 | min block: 1 |
| 42 | transaction size: 64-bit |
| 43 | |
| 44 | == check TLS fail over TCP with mismatched hostname == |
| 45 | qemu-img: Could not open 'driver=nbd,host=localhost,port=PORT,tls-creds=tls0': Certificate does not match the hostname localhost |
| 46 | qemu-nbd: Certificate does not match the hostname localhost |
| 47 | |
| 48 | == check TLS works over TCP with mismatched hostname and override == |
| 49 | image: nbd://localhost:PORT |
| 50 | file format: nbd |
| 51 | virtual size: 64 MiB (67108864 bytes) |
| 52 | disk size: unavailable |
| 53 | exports available: 1 |
| 54 | export: '' |
| 55 | size: 67108864 |
| 56 | min block: 1 |
| 57 | transaction size: 64-bit |
| 58 | |
| 59 | == check TLS with different CA fails == |
| 60 | qemu-img: Could not open 'driver=nbd,host=127.0.0.1,port=PORT,tls-creds=tls0': The certificate hasn't got a known issuer |
| 61 | qemu-nbd: The certificate hasn't got a known issuer |
| 62 | |
| 63 | == perform I/O over TLS == |
| 64 | read 1048576/1048576 bytes at offset 1048576 |
| 65 | 1 MiB, X ops; XX:XX:XX.X (XXX YYY/sec and XXX ops/sec) |
| 66 | wrote 1048576/1048576 bytes at offset 1048576 |
| 67 | 1 MiB, X ops; XX:XX:XX.X (XXX YYY/sec and XXX ops/sec) |
| 68 | read 1048576/1048576 bytes at offset 1048576 |
| 69 | 1 MiB, X ops; XX:XX:XX.X (XXX YYY/sec and XXX ops/sec) |
| 70 | |
| 71 | == check TLS with authorization == |
| 72 | qemu-img: Could not open 'driver=nbd,host=127.0.0.1,port=PORT,tls-creds=tls0': Failed to read option reply: Cannot read from TLS channel: The TLS connection was non-properly terminated. |
| 73 | qemu-img: Could not open 'driver=nbd,host=127.0.0.1,port=PORT,tls-creds=tls0': Failed to read option reply: Cannot read from TLS channel: The TLS connection was non-properly terminated. |
| 74 | |
| 75 | == check TLS fail over UNIX with no hostname == |
| 76 | qemu-img: Could not open 'driver=nbd,path=SOCK_DIR/qemu-nbd.sock,tls-creds=tls0': No hostname for certificate validation |
| 77 | qemu-nbd: No hostname for certificate validation |
| 78 | |
| 79 | == check TLS works over UNIX with hostname override == |
| 80 | image: nbd+unix://?socket=SOCK_DIR/qemu-nbd.sock |
| 81 | file format: nbd |
| 82 | virtual size: 64 MiB (67108864 bytes) |
| 83 | disk size: unavailable |
| 84 | exports available: 1 |
| 85 | export: '' |
| 86 | size: 67108864 |
| 87 | min block: 1 |
| 88 | transaction size: 64-bit |
| 89 | |
| 90 | == check TLS works over UNIX with PSK == |
| 91 | image: nbd+unix://?socket=SOCK_DIR/qemu-nbd.sock |
| 92 | file format: nbd |
| 93 | virtual size: 64 MiB (67108864 bytes) |
| 94 | disk size: unavailable |
| 95 | exports available: 1 |
| 96 | export: '' |
| 97 | size: 67108864 |
| 98 | min block: 1 |
| 99 | transaction size: 64-bit |
| 100 | |
| 101 | == check TLS fails over UNIX with mismatch PSK == |
| 102 | qemu-img: Could not open 'driver=nbd,path=SOCK_DIR/qemu-nbd.sock,tls-creds=tls0': TLS handshake failed: The TLS connection was non-properly terminated. |
| 103 | qemu-nbd: TLS handshake failed: The TLS connection was non-properly terminated. |
| 104 | |
| 105 | == final server log == |
| 106 | qemu-nbd: option negotiation failed: Failed to read opts magic: Cannot read from TLS channel: The TLS connection was non-properly terminated. |
| 107 | qemu-nbd: option negotiation failed: Failed to read opts magic: Cannot read from TLS channel: The TLS connection was non-properly terminated. |
| 108 | qemu-nbd: option negotiation failed: Verify failed: No certificate was found. |
| 109 | qemu-nbd: option negotiation failed: Verify failed: No certificate was found. |
| 110 | qemu-nbd: option negotiation failed: TLS x509 authz check for DISTINGUISHED-NAME is denied |
| 111 | qemu-nbd: option negotiation failed: TLS x509 authz check for DISTINGUISHED-NAME is denied |
| 112 | qemu-nbd: option negotiation failed: Failed to read opts magic: Cannot read from TLS channel: The TLS connection was non-properly terminated. |
| 113 | qemu-nbd: option negotiation failed: Failed to read opts magic: Cannot read from TLS channel: The TLS connection was non-properly terminated. |
| 114 | qemu-nbd: option negotiation failed: TLS handshake failed: An illegal parameter has been received. |
| 115 | qemu-nbd: option negotiation failed: TLS handshake failed: An illegal parameter has been received. |
| 116 | *** done |