[pve-devel] [PATCH] spiceproxy : allow only spice port range

[Alexandre DERUMIER]

>>I just committed a patch for pve-qemu-kvm to return the last ticktet 
>>with qmp query-spice. 

>>What do you think? Can you try to use that for your patches? 

Great ! Thanks ! 
I'll try that today.


(BTW, the ca=... fix has been commited to spice-gtk git)

----- Mail original ----- 

De: "Dietmar Maurer" <dietmar at proxmox.com> 
À: "Alexandre DERUMIER" <aderumier at odiso.com> 
Cc: pve-devel at pve.proxmox.com 
Envoyé: Mardi 23 Juillet 2013 09:04:47 
Objet: RE: [pve-devel] [PATCH] spiceproxy : allow only spice port range 

> > About password, I wonder if we could not retrieve the current ticket 
> > from spice server, and copy it to the target vm. 
> > 
> > Libvirt seem to simply store the current password in the vm config xml 
> > :/ 
> > 
> > <graphics type='spice' port='5900' autoport='no' passwd='secret' 
> > passwdValidTo='2013-05-31T16:11:22' connected='disconnect'/> 
> > 
> 
> IMHO storing secrets is a bad thing. We want to increase security by using a 
> short expiration time. 

I just committed a patch for pve-qemu-kvm to return the last ticktet 
with qmp query-spice. 

What do you think? Can you try to use that for your patches?