Changes in Makefile

35b1b538 - net/handshake: Add API for sending TLS Closure alerts

Thu, 27 Jul 2023 17:36:17 +0000

net/handshake: Add API for sending TLS Closure alertsThis helper sends an alert only if a TLS session was established.Signed-off-by: Chuck Lever Link: https://lore.kernel.org/r/169047936730.5241.618595693821012638.stgit@oracle-102.nfsv4bat.orgSigned-off-by: Jakub Kicinski List of files: /linux-6.15/net/handshake/Makefile

88232ec1 - net/handshake: Add Kunit tests for the handshake consumer API

Mon, 17 Apr 2023 14:32:39 +0000

net/handshake: Add Kunit tests for the handshake consumer APIThese verify the API contracts and help exercise lifetime rules forconsumer sockets and handshake_req structures.One way to run these tests:./tools/testing/kunit/kunit.py run --kunitconfig ./net/handshake/.kunitconfigSigned-off-by: Chuck Lever Signed-off-by: Jakub Kicinski List of files: /linux-6.15/net/handshake/Makefile

2fd55320 - net/handshake: Add a kernel API for requesting a TLSv1.3 handshake

Mon, 17 Apr 2023 14:32:33 +0000

net/handshake: Add a kernel API for requesting a TLSv1.3 handshakeTo enable kernel consumers of TLS to request a TLS handshake, addsupport to net/handshake/ to request a handshake upcall.This patch also acts as a template for adding handshake upcallsupport for other kernel transport layer security providers.Signed-off-by: Chuck Lever Signed-off-by: Jakub Kicinski List of files: /linux-6.15/net/handshake/Makefile

3b3009ea - net/handshake: Create a NETLINK service for handling handshake requests

Mon, 17 Apr 2023 14:32:26 +0000

net/handshake: Create a NETLINK service for handling handshake requestsWhen a kernel consumer needs a transport layer security session, itfirst needs a handshake to negotiate and establish a session. Thisnegotiation can be done in user space via one of the severalexisting library implementations, or it can be done in the kernel.No in-kernel handshake implementations yet exist. In their absence,we add a netlink service that can:a. Notify a user space daemon that a handshake is needed.b. Once notified, the daemon calls the kernel back via this netlink service to get the handshake parameters, including an open socket on which to establish the session.c. Once the handshake is complete, the daemon reports the session status and other information via a second netlink operation. This operation marks that it is safe for the kernel to use the open socket and the security session established there.The notification service uses a multicast group. Each handshakemechanism (eg, tlshd) adopts its own group number so that thehandshake services are completely independent of one another. Thekernel can then tell via netlink_has_listeners() whether a handshakeservice is active and prepared to handle a handshake request.A new netlink operation, ACCEPT, acts like accept(2) in that itinstantiates a file descriptor in the user space daemon's fd table.If this operation is successful, the reply carries the fd number,which can be treated as an open and ready file descriptor.While user space is performing the handshake, the kernel keeps itsmuddy paws off the open socket. A second new netlink operation,DONE, indicates that the user space daemon is finished with thesocket and it is safe for the kernel to use again. The operationalso indicates whether a session was established successfully.Signed-off-by: Chuck Lever Signed-off-by: Jakub Kicinski List of files: /linux-6.15/net/handshake/Makefile