debian/patches/pve/0004-PVE-Config-ui-spice-default-to-pve-certificates.patch

   1 From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
   2 From: Wolfgang Bumiller <w.bumiller@proxmox.com>
   3 Date: Mon, 6 Apr 2020 12:16:33 +0200
   4 Subject: [PATCH] PVE: [Config] ui/spice: default to pve certificates
   5
   6 Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
   7 ---
   8  ui/spice-core.c | 15 +++++++++------
   9  1 file changed, 9 insertions(+), 6 deletions(-)
  10
  11 diff --git a/ui/spice-core.c b/ui/spice-core.c
  12 index 0371055e6c..840cf56923 100644
  13 --- a/ui/spice-core.c
  14 +++ b/ui/spice-core.c
  15 @@ -694,32 +694,35 @@ static void qemu_spice_init(void)
  16
  17      if (tls_port) {
  18          x509_dir = qemu_opt_get(opts, "x509-dir");
  19 -        if (!x509_dir) {
  20 -            x509_dir = ".";
  21 -        }
  22
  23          str = qemu_opt_get(opts, "x509-key-file");
  24          if (str) {
  25              x509_key_file = g_strdup(str);
  26 -        } else {
  27 +        } else if (x509_dir) {
  28              x509_key_file = g_strdup_printf("%s/%s", x509_dir,
  29                                              X509_SERVER_KEY_FILE);
  30 +        } else {
  31 +            x509_key_file = g_strdup("/etc/pve/local/pve-ssl.key");
  32          }
  33
  34          str = qemu_opt_get(opts, "x509-cert-file");
  35          if (str) {
  36              x509_cert_file = g_strdup(str);
  37 -        } else {
  38 +        } else if (x509_dir) {
  39              x509_cert_file = g_strdup_printf("%s/%s", x509_dir,
  40                                               X509_SERVER_CERT_FILE);
  41 +        } else {
  42 +            x509_cert_file = g_strdup("/etc/pve/local/pve-ssl.pem");
  43          }
  44
  45          str = qemu_opt_get(opts, "x509-cacert-file");
  46          if (str) {
  47              x509_cacert_file = g_strdup(str);
  48 -        } else {
  49 +        } else if (x509_dir) {
  50              x509_cacert_file = g_strdup_printf("%s/%s", x509_dir,
  51                                                 X509_CA_CERT_FILE);
  52 +        } else {
  53 +            x509_cacert_file = g_strdup("/etc/pve/pve-root-ca.pem");
  54          }
  55
  56          x509_key_password = qemu_opt_get(opts, "x509-key-password");