def _read_libvirt_connection_config(): lconf_p = ParserWrapper({ 'auth_tcp': 'sasl', }) lconf_p.read(confutils.get_file_path('LCONF', FILES)) auth_tcp = lconf_p.get('auth_tcp') qconf_p = ParserWrapper({'spice_tls': '0'}) qconf_p.read(confutils.get_file_path('QCONF', FILES)) spice_tls = qconf_p.getboolean('spice_tls') return _LibvirtConnectionConfig(auth_tcp, spice_tls)
def _isSslConflict(): """ return True if libvirt configuration files match ssl configuration of vdsm.conf. """ ssl = config.getboolean('vars', 'ssl') lconf_p = ParserWrapper({ 'listen_tcp': '0', 'auth_tcp': 'sasl', 'listen_tls': '1', }) lconf_p.read(confutils.get_file_path('LCONF', FILES)) listen_tcp = lconf_p.getint('listen_tcp') auth_tcp = lconf_p.get('auth_tcp') listen_tls = lconf_p.getint('listen_tls') qconf_p = ParserWrapper({'spice_tls': '0'}) qconf_p.read(confutils.get_file_path('QCONF', FILES)) spice_tls = qconf_p.getboolean('spice_tls') ret = True if ssl: if listen_tls != 0 and listen_tcp != 1 and auth_tcp != '"none"' and \ spice_tls != 0: sys.stdout.write( "SUCCESS: ssl configured to true. No conflicts\n") else: sys.stdout.write( "FAILED: " "conflicting vdsm and libvirt-qemu tls configuration.\n" "vdsm.conf with ssl=True " "requires the following changes:\n" "libvirtd.conf: listen_tcp=0, auth_tcp=\"sasl\", " "listen_tls=1\nqemu.conf: spice_tls=1.\n" ) ret = False else: if listen_tls == 0 and listen_tcp == 1 and auth_tcp == '"none"' and \ spice_tls == 0: sys.stdout.write( "SUCCESS: ssl configured to false. No conflicts.\n") else: sys.stdout.write( "FAILED: " "conflicting vdsm and libvirt-qemu tls configuration.\n" "vdsm.conf with ssl=False " "requires the following changes:\n" "libvirtd.conf: listen_tcp=1, auth_tcp=\"none\", " "listen_tls=0\n qemu.conf: spice_tls=0.\n" ) ret = False return ret