Re: [PATCH net-next 3/4] tls: kernel TLS support

2017-05-26 Thread Eric Dumazet
On Fri, 2017-05-26 at 11:18 -0400, David Miller wrote: > From: Eric Dumazet > Date: Fri, 26 May 2017 07:16:59 -0700 > > > On Wed, 2017-05-24 at 09:27 -0700, Dave Watson wrote: > >> Software implementation of transport layer security, implemented using ULP > >> infrastructure. tcp proto_ops are r

Re: [PATCH net-next 3/4] tls: kernel TLS support

2017-05-26 Thread David Miller
From: Eric Dumazet Date: Fri, 26 May 2017 07:16:59 -0700 > On Wed, 2017-05-24 at 09:27 -0700, Dave Watson wrote: >> Software implementation of transport layer security, implemented using ULP >> infrastructure. tcp proto_ops are replaced with tls equivalents of sendmsg >> and >> sendpage. > > .

Re: [PATCH net-next 3/4] tls: kernel TLS support

2017-05-26 Thread Eric Dumazet
On Wed, 2017-05-24 at 09:27 -0700, Dave Watson wrote: > Software implementation of transport layer security, implemented using ULP > infrastructure. tcp proto_ops are replaced with tls equivalents of sendmsg > and > sendpage. ... > + > +int tls_sw_sendmsg(struct sock *sk, struct msghdr *msg, si

[PATCH net-next 3/4] tls: kernel TLS support

2017-05-24 Thread Dave Watson
Software implementation of transport layer security, implemented using ULP infrastructure. tcp proto_ops are replaced with tls equivalents of sendmsg and sendpage. Only symmetric crypto is done in the kernel, keys are passed by setsockopt after the handshake is complete. All control messages are