mwatts@redhat.com has uploaded this change for review.
fscrypt kmip module - get key from kmip, give to ceph fsal module.
This works as a export extension plugin and adds extra global and
per-export configuration options to configure parameters to talk to the
kmip host, and to associate key information with the corresponding export.
If a key cannot be fetched, the correpsonding export is not
made available.
This uses "libkmip" and "OpenSSL" to talk to the kmip server.
Client intermediate certificate are supported, as well as SNI.
Change-Id: I21ddced4ab0dbb083ee40eb11e485443e11ebe21
Signed-off-by: Marcus Watts <mwatts@redhat.com>
---
M src/PLUGIN/CMakeLists.txt
A src/PLUGIN/kmip/CMakeLists.txt
A src/PLUGIN/kmip/kmip_fscrypt.c
M src/nfs-ganesha.spec-in.cmake
4 files changed, 1,330 insertions(+), 0 deletions(-)
git pull ssh://review.gerrithub.io:29418/ffilz/nfs-ganesha refs/changes/02/1221502/1
To view, visit change 1221502. To unsubscribe, or for help writing mail filters, visit settings.