| 71ac6d7e | 08-Sep-2023 |
Krzysztof Karas <krzysztof.karas@intel.com> |
hello_sock: Use unhexlified PSK in global array.
Later in the series asynchronous TLS handshake is introduced. This means that memory holding the unhexlified PSK may be used outside hello_sock_conne
hello_sock: Use unhexlified PSK in global array.
Later in the series asynchronous TLS handshake is introduced. This means that memory holding the unhexlified PSK may be used outside hello_sock_connect() function in which it was previously declared, so move unhexlifying to hello_sock_parse_arg() and use binary PSK in global array.
Additionally group impl_opts.* assignments together.
Change-Id: I7a93247bedb00e850c1f8a979f837603e35fd563 Signed-off-by: Krzysztof Karas <krzysztof.karas@intel.com> Reviewed-on: https://review.spdk.io/gerrit/c/spdk/spdk/+/19813 Tested-by: SPDK CI Jenkins <sys_sgci@intel.com> Reviewed-by: Tomasz Zawadzki <tomasz.zawadzki@intel.com> Reviewed-by: Konrad Sztyber <konrad.sztyber@intel.com> Community-CI: Mellanox Build Bot
show more ...
|
| 9d08def9 | 19-May-2023 |
Marcin Spiewak <marcin.spiewak@intel.com> |
hello_sock: check if ctx->group is NULL
Fixed issue detected by Klocwork scan. ctx->group must be checked for NULL before call to spdk_sock_group_provide_buf(ctx->group, ...), otherwise in this func
hello_sock: check if ctx->group is NULL
Fixed issue detected by Klocwork scan. ctx->group must be checked for NULL before call to spdk_sock_group_provide_buf(ctx->group, ...), otherwise in this function we are dereferencing NULL pointer in line: STAILQ_INSERT_HEAD(&group->pool, provided, link);
Change-Id: I10d1d35d1026f12f7fa02b24639f6036e0a798f2 Signed-off-by: Marcin Spiewak <marcin.spiewak@intel.com> Reviewed-on: https://review.spdk.io/gerrit/c/spdk/spdk/+/18244 Reviewed-by: Krzysztof Karas <krzysztof.karas@intel.com> Reviewed-by: Jim Harris <james.r.harris@intel.com> Reviewed-by: Konrad Sztyber <konrad.sztyber@intel.com> Tested-by: SPDK CI Jenkins <sys_sgci@intel.com>
show more ...
|
| 169ee6c3 | 04-Jan-2023 |
Krzysztof Karas <krzysztof.karas@intel.com> |
TCP: prepare for usage of supported cipher suites
Prepare for cipher suite selection introduced in the next patch. Cipher suites are going to be selected based on size of provided PSK in interchange
TCP: prepare for usage of supported cipher suites
Prepare for cipher suite selection introduced in the next patch. Cipher suites are going to be selected based on size of provided PSK in interchange format.
Choosing hash function for retained PSK will be introduced in a future patch along with PSK interchange format.
Use TLS_AES_128_GCM_SHA256 until information about cipher suite can be derived from length of PSK configured.
Cipher TLS_AES_256_GCM_SHA384 requires us to use newer version of OpenSSL callbacks: instead of setting them with SSL_set_psk_server_callback() we'll need to use SSL_set_psk_find_session_callback() for server callbacks. As a part of this patch introduce required server side changes.
Change-Id: I3683f6366aab3fea71ab218dbf4e2589292120e2 Signed-off-by: Krzysztof Karas <krzysztof.karas@intel.com> Reviewed-on: https://review.spdk.io/gerrit/c/spdk/spdk/+/16125 Reviewed-by: Ben Walker <benjamin.walker@intel.com> Reviewed-by: Jim Harris <james.r.harris@intel.com> Tested-by: SPDK CI Jenkins <sys_sgci@intel.com> Community-CI: Mellanox Build Bot Reviewed-by: Konrad Sztyber <konrad.sztyber@intel.com>
show more ...
|
| dd824d4e | 31-Jan-2023 |
Krzysztof Karas <krzysztof.karas@intel.com> |
sock: add TLS cipher suite field
Add a field to structure spdk_sock_impl_opts that will be set with selected cipher suite for connecting side or cipher suite list for listening side. Then set cipher
sock: add TLS cipher suite field
Add a field to structure spdk_sock_impl_opts that will be set with selected cipher suite for connecting side or cipher suite list for listening side. Then set cipher suite with SSL_CTX_set_ciphersuites().
Cipher TLS_AES_256_GCM_SHA384 requires us to use newer version of OpenSSL callbacks, which are incompatibilie with TLS 1.2 and below: - instead of setting them with SSL_set_psk_client_callback() we'll need to use SSL_set_psk_use_session_callback for client callbacks. As a part of this patch introduce required client side changes. - remove support for TLS 1.2 and below, as required cipher suites are incompatibile with earlier TLS versions.
Change-Id: Id4e274ad2cc265f79d8dd02e65692678981926f2 Signed-off-by: Krzysztof Karas <krzysztof.karas@intel.com> Reviewed-on: https://review.spdk.io/gerrit/c/spdk/spdk/+/16672 Reviewed-by: Konrad Sztyber <konrad.sztyber@intel.com> Community-CI: Mellanox Build Bot Tested-by: SPDK CI Jenkins <sys_sgci@intel.com> Reviewed-by: Ben Walker <benjamin.walker@intel.com> Reviewed-by: Jim Harris <james.r.harris@intel.com>
show more ...
|