sys: Remove $FreeBSD$: one-line sh patternRemove /^\s*#[#!]?\s*\$FreeBSD\$.*$\n/
Fix some modules to export more used symbolsand remove non-present symbols that are now reported by kmod_syms.awk.Reviewed by: emasteSponsored by: The FreeBSD FoundationMFC after: 1 weekDiffer
Fix some modules to export more used symbolsand remove non-present symbols that are now reported by kmod_syms.awk.Reviewed by: emasteSponsored by: The FreeBSD FoundationMFC after: 1 weekDifferential revision: https://reviews.freebsd.org/D32878
show more ...
Add TLS support to the kernel RPC.An internet draft titled "Towards Remote Procedure Call Encryption By Default"describes how TLS is to be used for Sun RPC, with NFS as an intended use case.This
Add TLS support to the kernel RPC.An internet draft titled "Towards Remote Procedure Call Encryption By Default"describes how TLS is to be used for Sun RPC, with NFS as an intended use case.This patch adds client and server support for this to the kernel RPC,using KERN_TLS and upcalls to daemons for the handshake, peer reset andother non-application data record cases.The upcalls to the daemons use three fields to uniquely identify theTCP connection. They are the time.tv_sec, time.tv_usec of the connectionestablshment, plus a 64bit sequence number. The time fields avoid problemswith re-use of the sequence number after a daemon restart.For the server side, once a Null RPC with AUTH_TLS is received, kernelreception on the socket is blocked and an upcall to the rpctlssd(8) daemonis done to perform the TLS handshake. Upon completion, the completionstatus of the handshake is stored in xp_tls as flag bits and the reply tothe Null RPC is sent.For the client, if CLSET_TLS has been set, a new TCP connection willsend the Null RPC with AUTH_TLS to initiate the handshake. The clientkernel RPC code will then block kernel I/O on the socket and do an upcallto the rpctlscd(8) daemon to perform the handshake.If the upcall is successful, ct_rcvstate will be maintained to indicateif/when an upcall is being done.If non-application data records are received, the code does an upcall tothe appropriate daemon, which will do a SSL_read() of 0 length to handlethe record(s).When the socket is being shut down, upcalls are done to the daemons, sothat they can perform SSL_shutdown() calls to perform the "peer reset".The rpctlssd(8) and rpctlscd(8) daemons require a patched version of theopenssl library and, as such, will not be committed to head at this time.Although the changes done by this patch are fairly numerous, there shouldbe no semantics change to the kernel RPC at this time.A future commit to the NFS code will optionally enable use of TLS for NFS.
Split XDR into separate kernel module. Make krpc depend on xdr.Reviewed by: rmacklemDifferential Revision: https://reviews.freebsd.org/D24408
sys/modules: normalize .CURDIR-relative paths to SRCTOPThis simplifies make output/logicTested with: `cd sys/modules; make ALL_MODULES=` on amd64MFC after: 1 monthSponsored by: Dell EMC Isilon
Move most of the 15 variations on generating opt_inet.h andopt_inet6.h into kmod.mk by forcing almost everybody to eat the samedogfood. While at it, consolidate the opt_bpf.h and opt_mroute.htarge
Move most of the 15 variations on generating opt_inet.h andopt_inet6.h into kmod.mk by forcing almost everybody to eat the samedogfood. While at it, consolidate the opt_bpf.h and opt_mroute.htargets here too.
Merge the NFSv4.1 server code in projects/nfsv4.1-server overinto head. The code is not believed to have any effecton the semantics of non-NFSv4.1 server behaviour.It is a rather large merge, but
Merge the NFSv4.1 server code in projects/nfsv4.1-server overinto head. The code is not believed to have any effecton the semantics of non-NFSv4.1 server behaviour.It is a rather large merge, but I am hoping that there willnot be any regressions for the NFS server.MFC after: 1 month
Make the RPC specific __rpc_inet_ntop() and __rpc_inet_pton() generalin the kernel (just as inet_ntoa() and inet_aton()) are and sync theirprototype accordingly with already mentioned functions.S
Make the RPC specific __rpc_inet_ntop() and __rpc_inet_pton() generalin the kernel (just as inet_ntoa() and inet_aton()) are and sync theirprototype accordingly with already mentioned functions.Sponsored by: Sandvine IncorporatedReviewed by: emaste, rstoneApproved by: dfrMFC after: 2 weeks
Unbreak NFS.Pointy hat to: dfr
Add nfslockd and krpc modules.