mirror of
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
synced 2025-08-20 05:58:10 +00:00
e22da46850
Add a new netlink parameter 'HANDSHAKE_A_ACCEPT_KEYRING' to provide the serial number of the keyring to use. Signed-off-by: Hannes Reinecke <hare@kernel.org> Reviewed-by: Chuck Lever <chuck.lever@oracle.com> Acked-by: Jakub Kicinski <kuba@kernel.org> Link: https://patch.msgid.link/20250701144657.104401-1-hare@kernel.org Signed-off-by: Paolo Abeni <pabeni@redhat.com>
133 lines
2.4 KiB
YAML
133 lines
2.4 KiB
YAML
# SPDX-License-Identifier: ((GPL-2.0 WITH Linux-syscall-note) OR BSD-3-Clause)
|
|
#
|
|
# Author: Chuck Lever <chuck.lever@oracle.com>
|
|
#
|
|
# Copyright (c) 2023, Oracle and/or its affiliates.
|
|
#
|
|
---
|
|
name: handshake
|
|
|
|
protocol: genetlink
|
|
|
|
doc: Netlink protocol to request a transport layer security handshake.
|
|
|
|
definitions:
|
|
-
|
|
type: enum
|
|
name: handler-class
|
|
value-start: 0
|
|
entries: [none, tlshd, max]
|
|
-
|
|
type: enum
|
|
name: msg-type
|
|
value-start: 0
|
|
entries: [unspec, clienthello, serverhello]
|
|
-
|
|
type: enum
|
|
name: auth
|
|
value-start: 0
|
|
entries: [unspec, unauth, psk, x509]
|
|
|
|
attribute-sets:
|
|
-
|
|
name: x509
|
|
attributes:
|
|
-
|
|
name: cert
|
|
type: s32
|
|
-
|
|
name: privkey
|
|
type: s32
|
|
-
|
|
name: accept
|
|
attributes:
|
|
-
|
|
name: sockfd
|
|
type: s32
|
|
-
|
|
name: handler-class
|
|
type: u32
|
|
enum: handler-class
|
|
-
|
|
name: message-type
|
|
type: u32
|
|
enum: msg-type
|
|
-
|
|
name: timeout
|
|
type: u32
|
|
-
|
|
name: auth-mode
|
|
type: u32
|
|
enum: auth
|
|
-
|
|
name: peer-identity
|
|
type: u32
|
|
multi-attr: true
|
|
-
|
|
name: certificate
|
|
type: nest
|
|
nested-attributes: x509
|
|
multi-attr: true
|
|
-
|
|
name: peername
|
|
type: string
|
|
-
|
|
name: keyring
|
|
type: u32
|
|
-
|
|
name: done
|
|
attributes:
|
|
-
|
|
name: status
|
|
type: u32
|
|
-
|
|
name: sockfd
|
|
type: s32
|
|
-
|
|
name: remote-auth
|
|
type: u32
|
|
multi-attr: true
|
|
|
|
operations:
|
|
list:
|
|
-
|
|
name: ready
|
|
doc: Notify handlers that a new handshake request is waiting
|
|
notify: accept
|
|
-
|
|
name: accept
|
|
doc: Handler retrieves next queued handshake request
|
|
attribute-set: accept
|
|
flags: [admin-perm]
|
|
do:
|
|
request:
|
|
attributes:
|
|
- handler-class
|
|
reply:
|
|
attributes:
|
|
- sockfd
|
|
- message-type
|
|
- timeout
|
|
- auth-mode
|
|
- peer-identity
|
|
- certificate
|
|
- peername
|
|
- keyring
|
|
-
|
|
name: done
|
|
doc: Handler reports handshake completion
|
|
attribute-set: done
|
|
do:
|
|
request:
|
|
attributes:
|
|
- status
|
|
- sockfd
|
|
- remote-auth
|
|
|
|
mcast-groups:
|
|
list:
|
|
-
|
|
name: none
|
|
-
|
|
name: tlshd
|