]> xenbits.xensource.com Git - libvirt.git/commitdiff
Fix mistaken order of server cert/key parameters in constructor
authorDaniel P. Berrange <berrange@redhat.com>
Fri, 8 Jul 2011 10:14:20 +0000 (11:14 +0100)
committerDaniel P. Berrange <berrange@redhat.com>
Fri, 8 Jul 2011 15:19:57 +0000 (16:19 +0100)
The virNetTLSContextNew was being passed key/cert parameters in
the wrong order. This wasn't immediately visible because if
virNetTLSContextNewPath was used, a second bug reversed the order
of those parameters again.

Only if the paths were manually specified in /etc/libvirt/libvirtd.conf
did the bug appear

* src/rpc/virnettlscontext.c: Fix order of params passed to
  virNetTLSContextNew

src/rpc/virnettlscontext.c

index ad8e2dc8208541fd62d5a7f0989c76125f5b4c3b..1120e1e89495325f9225afbde787f1c00245761c 100644 (file)
@@ -396,10 +396,10 @@ static virNetTLSContextPtr virNetTLSContextNewPath(const char *pkipath,
     virNetTLSContextPtr ctxt = NULL;
 
     if (virNetTLSContextLocateCredentials(pkipath, tryUserPkiPath, isServer,
-                                          &cacert, &cacrl, &key, &cert) < 0)
+                                          &cacert, &cacrl, &cert, &key) < 0)
         return NULL;
 
-    ctxt = virNetTLSContextNew(cacert, cacrl, key, cert,
+    ctxt = virNetTLSContextNew(cacert, cacrl, cert, key,
                                x509dnWhitelist, requireValidCert, isServer);
 
     VIR_FREE(cacert);
@@ -435,7 +435,7 @@ virNetTLSContextPtr virNetTLSContextNewServer(const char *cacert,
                                               const char *const*x509dnWhitelist,
                                               bool requireValidCert)
 {
-    return virNetTLSContextNew(cacert, cacrl, key, cert,
+    return virNetTLSContextNew(cacert, cacrl, cert, key,
                                x509dnWhitelist, requireValidCert, true);
 }