server,client: server authentication for secured channels. #527411 #549673.

3 available mechanisms:  by public key, by host name, and by certificate subject name.
    In the former method, chain of trust verification is not performed.
    The CA certificate files are looked for under <spice-config-dir>/spice_truststore.pem

    windows <spice-config-dir>=%APPDATA%\spicec\
    linux <spice-config-dir>=$HOME/.spicec

1 files changed, 3 insertions, 0 deletions

diff --git a/client/red_client.h b/client/red_client.h
index 04c800cc..d97128e5 100644
--- a/client/red_client.h
+++ b/client/red_client.h
@@ -76,6 +76,7 @@ private:
     std::string _host;
     int _port;
     int _sport;
+    RedPeer::HostAuthOptions _auth_options;
     Thread* _thread;
     Mutex _lock;
     Condition _cond;
@@ -148,6 +149,7 @@ public:
     Application& get_application() { return _application;}
     bool is_auto_display_res() { return _auto_display_res;}
     RedPeer::ConnectionOptions::Type get_connection_options(uint32_t channel_type);
+    RedPeer::HostAuthOptions& get_host_auth_options() { return _host_auth_opt;}
     void get_sync_info(uint8_t channel_type, uint8_t channel_id, SyncInfo& info);
     void wait_for_channels(int wait_list_size, RedWaitForChannel* wait_list);
     PixmapCache& get_pixmap_cache() {return _pixmap_cache;}
@@ -215,6 +217,7 @@ private:
     AutoRef<AgentTimer> _agent_timer;
 
     PeerConnectionOptMap _con_opt_map;
+    RedPeer::HostAuthOptions _host_auth_opt;
     Migrate _migrate;
     Mutex _channels_lock;
     typedef std::list<ChannelFactory*> Factorys;