Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-71529

[NetApp RHEL 9.6 Bug]: Backport TLS related upstream commits

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Major Major
    • None
    • rhel-9.6
    • libnvme
    • rhel-sst-storage-io
    • ssg_platform_storage
    • 2
    • Dev ack
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • None
    • None
    • All
    • None

      Please backport the following libnvme/nvme-cli TLS related upstream commits to RHEL 9.6:

      libnvme:

      fabrics: do not attempt to import keys if tls is not enabled - https://github.com/linux-nvme/libnvme/commit/2d92c354d58be032b248fb8f85d3118088cdfef4

      linux: do not do any keyring ops when no key is provided - https://github.com/linux-nvme/libnvme/commit/21f5e8617507bd3e8e14879fe7c5a20707b5a7d0

      linux: fix derive_psk_digest OpenSSL 1.1 version - https://github.com/linux-nvme/libnvme/commit/81073a178c198a1b7f08964300905cbec595c14e

      tree: do no export tls keys when not provided by user - https://github.com/linux-nvme/libnvme/commit/f8f82abe4fff8ba2ca71da5d3635200931dae118

      linux: fixup PSK HMAC type '0' handling - https://github.com/linux-nvme/libnvme/commit/e48845ecba1aa72d45f3fa4c8aa257072c25dcd0

      util: added error code for ENOKEY - https://github.com/linux-nvme/libnvme/commit/dd1daf34d11754dc9e1e8d026e2aa3b552e9b0b3

      fabrics: use hex numbers when generating command line options - https://github.com/linux-nvme/libnvme/commit/e0db450d260302921b630f2da5e505478dc5134f

      linux: handle key import correctly - https://github.com/linux-nvme/libnvme/commit/2201d1375b877356eb3e3cf6b61ad932b852a66b

      linux: export keys to config - https://github.com/linux-nvme/libnvme/commit/6e8e03a3d16c12bf6dd5440254c1c1c12ffa9b94

      tree: read tls_configured_key and tls_keyring from sysfs - https://github.com/linux-nvme/libnvme/commit/b9f08d5bd3d84c0df0eb6a3321a8006801214fd1

      tree: move dhchap and tls sysfs parser into separate functions - https://github.com/linux-nvme/libnvme/commit/f23ae8cd59fa20e98f587dd0717b380c65325119

      json: move keystore operations out of the JSON parser - https://github.com/linux-nvme/libnvme/commit/9c4a34b54542e26948a8b5f817c31d72b02f69a0

      tree: add getter/setters for TLS PSK - https://github.com/linux-nvme/libnvme/commit/c5a9371c1c0581c2000a07d2ba8d3e55629bc09a

      linux: add import/export function for TLS pre-shared keys - https://github.com/linux-nvme/libnvme/commit/454373a2a4007ccab1574288252e4a2423786d45

      linux: only return the description of a key - https://github.com/linux-nvme/libnvme/commit/40230e61282353ae8d8e73b1748a6df3be44c7c9

      nvme-cli:

      nvme: update tls_key() handling - https://github.com/linux-nvme/nvme-cli/commit/2dd2870aa44a2183f36232ce324836fab3931ddc

      nvme: add support to append TLS PSK to keyfile for check-tls-key - https://github.com/linux-nvme/nvme-cli/commit/5604741fe1221f82e5ec0aa1e6e8a4d7cc8c155b

      nvme: return correct error code in append_keyfile - https://github.com/linux-nvme/nvme-cli/commit/3ed82e8b10ad7dfb80c3b9fdcf2ee308736d11b6

      nvme: add support to add derive TLS PSK to keyfile - https://github.com/linux-nvme/nvme-cli/commit/ef8426fa0c6318cd6459bad7b6fe04d7fe1a5a8a

      nvme: set file permission for keyfile to owner only - https://github.com/linux-nvme/nvme-cli/commit/e63d4ce9229e8a39355ab80d615d66983b9853a4

      nvme: export tls keys honoring version and hmac - https://github.com/linux-nvme/nvme-cli/commit/dc5fec5b65a160733f08e97aae0d812a1fedd7ac

      nvmf-keys: add udev rule to import tls keys - https://github.com/linux-nvme/nvme-cli/commit/682e97e137af7dac39c386ff4254db22b1dd0bd8

      fabrics: add support to connect to accept a PSK command line - https://github.com/linux-nvme/nvme-cli/commit/e25b7755e7f5d4f5a0a9155ed2db351c09df4969

      nvme: use unsigned char for hmac and identity - https://github.com/linux-nvme/nvme-cli/commit/97cee9d13a01de4163ba2bae52fea13f15af85ed

      docs: update check-tls-key arguments - https://github.com/linux-nvme/nvme-cli/commit/39b1db8598c19c4dc074fa837e15f016d3a6915f

              mlombard@redhat.com Maurizio Lombardi
              marting_netapp Martin George
              NetApp Confidential Group
              Maurizio Lombardi Maurizio Lombardi
              Yi Zhang Yi Zhang
              Votes:
              0 Vote for this issue
              Watchers:
              7 Start watching this issue

                Created:
                Updated:
                Resolved: