]> www.infradead.org Git - users/hch/misc.git/commit
projects / users / hch / misc.git / commit
summary | shortlog | log | commit | commitdiff | tree
(parent: c57be73) | patch
NFS: support the kernel keyring for TLS
authorChristoph Hellwig <hch@lst.de>
Sun, 27 Apr 2025 13:07:08 +0000 (06:07 -0700)
committerChristoph Hellwig <hch@lst.de>
Tue, 13 May 2025 08:48:19 +0000 (10:48 +0200)
commit0ec034dcec5e8632dd7c2e292f2696fa644ace25
tree91208029bdb67b7e0e509d2ef256a919658899f2tree
parentc57be73f94ce713782529e90636bba99ff92e347commit | diff
NFS: support the kernel keyring for TLS

Allow tlshd to use a per-mount key from the kernel keyring similar
to NVMe over TCP.

Note that tlshd expects keys and certificates stored in the kernel
keyring to be in DER format, not the PEM format used for file based keys
and certificates, so they need to be converted before they are added
to the keyring, which is a bit unexpected.

Signed-off-by: Christoph Hellwig <hch@lst.de>
fs/nfs/fs_context.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.