Re: Kernel TLS in 4.13-rc1
From: Dave Watson <hidden>
Date: 2017-07-24 21:10:32
On 07/23/17 09:39 PM, David Oberhollenzer wrote:
After fixing the benchmark/test tool that the patch description linked to (https://github.com/Mellanox/tls-af_ktls_tool) to make sure that the server and client actually *agree* on AES-128-GCM, I simply ran the client program with the --verify-sendpage option. The handshake and setting up of the sockets appears to work but the program complains that the sent and received page contents do not match (sent is 0x12 repeated all over and received looks pretty random).
The --verify functions depend on the RX path as well, which has not been merged. Any programs / tests using OpenSSL + patches should work fine. If you want to use the tool, something like this should work, so that the receive path uses gnutls: ./server --no-echo ./client --server-port 12345 --sendfile some_file --server-host localhost