]> www.infradead.org Git - users/hch/misc.git/commit
nvmet-tcp: support secure channel concatenation
authorHannes Reinecke <hare@kernel.org>
Mon, 24 Feb 2025 12:38:17 +0000 (13:38 +0100)
committerKeith Busch <kbusch@kernel.org>
Thu, 20 Mar 2025 23:53:54 +0000 (16:53 -0700)
commitfa2e0f8bbc68908d14a97407bbbf8d8cccaf90a4
treea9e6e7b704c7e7eda34b496488186a4f0a20d291
parent5032167264eea2d2f11b42083119efedcf146b53
nvmet-tcp: support secure channel concatenation

Evaluate the SC_C flag during DH-CHAP-HMAC negotiation to check if secure
concatenation as specified in the NVMe Base Specification v2.1, section
8.3.4.3: "Secure Channel Concatenationand" is requested. If requested the
generated PSK is inserted into the keyring once negotiation has finished
allowing for an encrypted connection once the admin queue is restarted.

Signed-off-by: Hannes Reinecke <hare@kernel.org>
Reviewed-by: Sagi Grimberg <sagi@grimberg.me>
Signed-off-by: Keith Busch <kbusch@kernel.org>
drivers/nvme/target/auth.c
drivers/nvme/target/core.c
drivers/nvme/target/fabrics-cmd-auth.c
drivers/nvme/target/fabrics-cmd.c
drivers/nvme/target/nvmet.h
drivers/nvme/target/tcp.c