nvmet-tcp: enable TLS handshake upcall

Browse source

TLS handshake is handled in userspace with the netlink tls handshake
protocol.

The patch adds a function to start the TLS handshake upcall for any
incoming network connections if the TCP TSAS sectype is set to 'tls1.3'.

A config option NVME_TARGET_TCP_TLS selects whether the TLS handshake
upcall should be compiled in.  The patch also adds reference counting
to struct nvmet_tcp_queue to ensure the queue is always valid when the
the TLS handshake completes.

Signed-off-by: Hannes Reinecke <hare@suse.de>
Reviewed-by: Sagi Grimberg <sagi@grimberg.me>
Signed-off-by: Keith Busch <kbusch@kernel.org>

...

This commit is contained in:

Hannes Reinecke 2023-08-24 16:39:23 +02:00 • committed by Keith Busch

parent eb398812bd

commit 675b453e02

4 changed files with 187 additions and 4 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

15

drivers/nvme/target/Kconfig

View file

21

drivers/nvme/target/configfs.c

View file

1

drivers/nvme/target/nvmet.h

View file

154

drivers/nvme/target/tcp.c

View file