netdev - [PATCH v2 0/2] Avoid hang when mounting xprtsec=[m]tls

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <20250521203414.889931-1-cel@kernel.org>
Date: Wed, 21 May 2025 16:34:12 -0400
From: cel@...nel.org
To: Trond Myklebust <trond.myklebust@...merspace.com>,
	Anna Schumaker <anna@...nel.org>
Cc: Mike Snitzer <snitzer@...nel.org>,
	Thomas Haynes <loghyr@...merspace.com>,
	<linux-nfs@...r.kernel.org>,
	<netdev@...r.kernel.org>,
	<kernel-tls-handshake@...ts.linux.dev>,
	Chuck Lever <chuck.lever@...cle.com>
Subject: [PATCH v2 0/2] Avoid hang when mounting xprtsec=[m]tls

From: Chuck Lever <chuck.lever@...cle.com>

An NFS mount request can sometimes hang when TLS is requested.
This series attempts to address that.

I've checked on a couple of things since v1.

 - Why doesn't the Linux kernel SunRPC client already poll just
   after connecting? Typically the SunRPC client does not expect
   an RPC Reply (ie, any ingress traffic) until it has sent an RPC
   Call first. RPC-with-TLS has changed that scenario a bit.

 - Is this an issue for other in-kernel TLS consumers? It is. But
   the only other in-kernel TLS consumer at the moment is NVMe over
   TCP, and it already polls after a successful connection, for
   other reasons.

Changes since v1:
- Include Mike's R-b and T-b tags in 1/2
- Clean up dead code noticed while testing

Chuck Lever (2):
  SUNRPC: Prevent hang on NFS mount with xprtsec=[m]tls
  SUNRPC: Remove dead code from xs_tcp_tls_setup_socket()

 net/sunrpc/xprtsock.c | 16 +++++-----------
 1 file changed, 5 insertions(+), 11 deletions(-)

-- 
2.49.0