diff options
| author | Hannes Reinecke <hare@suse.de> | 2023-08-24 17:39:23 +0300 |
|---|---|---|
| committer | Keith Busch <kbusch@kernel.org> | 2023-10-11 20:29:59 +0300 |
| commit | 675b453e024154dd547921c6e6d5b58747ba7e0e (patch) | |
| tree | 2fee2aec3ad6eac24fd16f96636d58441f5a8ae0 /drivers/nvme/target/Kconfig | |
| parent | eb398812bd046e86a332229d8a17525a05351b20 (diff) | |
| download | linux-675b453e024154dd547921c6e6d5b58747ba7e0e.tar.xz | |
nvmet-tcp: enable TLS handshake upcall
TLS handshake is handled in userspace with the netlink tls handshake
protocol.
The patch adds a function to start the TLS handshake upcall for any
incoming network connections if the TCP TSAS sectype is set to 'tls1.3'.
A config option NVME_TARGET_TCP_TLS selects whether the TLS handshake
upcall should be compiled in. The patch also adds reference counting
to struct nvmet_tcp_queue to ensure the queue is always valid when the
the TLS handshake completes.
Signed-off-by: Hannes Reinecke <hare@suse.de>
Reviewed-by: Sagi Grimberg <sagi@grimberg.me>
Signed-off-by: Keith Busch <kbusch@kernel.org>
Diffstat (limited to 'drivers/nvme/target/Kconfig')
| -rw-r--r-- | drivers/nvme/target/Kconfig | 15 |
1 files changed, 15 insertions, 0 deletions
diff --git a/drivers/nvme/target/Kconfig b/drivers/nvme/target/Kconfig index 79fc64035ee3..c56cb1005327 100644 --- a/drivers/nvme/target/Kconfig +++ b/drivers/nvme/target/Kconfig @@ -84,6 +84,21 @@ config NVME_TARGET_TCP If unsure, say N. +config NVME_TARGET_TCP_TLS + bool "NVMe over Fabrics TCP target TLS encryption support" + depends on NVME_TARGET_TCP + select NVME_COMMON + select NVME_KEYRING + select NET_HANDSHAKE + select KEYS + help + Enables TLS encryption for the NVMe TCP target using the netlink handshake API. + + The TLS handshake daemon is available at + https://github.com/oracle/ktls-utils. + + If unsure, say N. + config NVME_TARGET_AUTH bool "NVMe over Fabrics In-band Authentication support" depends on NVME_TARGET |