[Qemu-devel] Error when attempting to perform TLS NBD connection

[Alex Bligh]

When I attempt to connect via TLS like this (using today's qemu master):

   ./qemu-img info --object tls-creds-x509,id=tls0,dir=../certs,endpoint=client 
--image-opts driver=nbd,host=127.0.0.1,port=6666,export=foo,tls-creds=tls0

(command line from Daniel over IRC)

I get the rather opaque error:

   qemu-img: Unable to initialize certificate

and with the patch I sent through I get the not much less opaque error:

   qemu-img: Unable to initialize certificate: ASN1 parser: Element was not 
found.

gdb indicates this is crypto/tlscredsx509.c:399 where 
gnutls_x509_crt_init(&cert) fails.

I generated the certificates EXACTLY as per:
   http://qemu.weilnetz.de/qemu-doc.html#vnc_005fgenerate_005fcert
(also from Daniel over IRC)

and the certificates work fine with gnutls-cli and gnutls-server

I am compiling on and running on Ubuntu Trusty 14.04, and have an up to date
(for 14.04) gnutls installed.

$ dpkg --list | fgrep libgnutls26
ii libgnutls26:amd64  2.12.23-12ubuntu2.4 amd64 GNU TLS library - runtime 
library

All the certificates are at:
  https://gist.github.com/abligh/96425e20fb423d847b8fd4ead298efed
(no there's nothing secret there)

Any ideas?

-- 
Alex Bligh