mwatts(a)redhat.com has uploaded this change for review. (
https://review.gerrithub.io/c/ffilz/nfs-ganesha/+/1221502?usp=email )
Change subject: fscrypt kmip module - get key from kmip, give to ceph fsal module.
......................................................................
fscrypt kmip module - get key from kmip, give to ceph fsal module.
This works as a export extension plugin and adds extra global and
per-export configuration options to configure parameters to talk to the
kmip host, and to associate key information with the corresponding export.
If a key cannot be fetched, the correpsonding export is not
made available.
This uses "libkmip" and "OpenSSL" to talk to the kmip server.
Client intermediate certificate are supported, as well as SNI.
Change-Id: I21ddced4ab0dbb083ee40eb11e485443e11ebe21
Signed-off-by: Marcus Watts <mwatts(a)redhat.com>
---
M src/PLUGIN/CMakeLists.txt
A src/PLUGIN/kmip/CMakeLists.txt
A src/PLUGIN/kmip/kmip_fscrypt.c
M src/nfs-ganesha.spec-in.cmake
4 files changed, 1,330 insertions(+), 0 deletions(-)
git pull ssh://review.gerrithub.io:29418/ffilz/nfs-ganesha refs/changes/02/1221502/1
--
To view, visit
https://review.gerrithub.io/c/ffilz/nfs-ganesha/+/1221502?usp=email
To unsubscribe, or for help writing mail filters, visit
https://review.gerrithub.io/settings?usp=email
Gerrit-MessageType: newchange
Gerrit-Project: ffilz/nfs-ganesha
Gerrit-Branch: next
Gerrit-Change-Id: I21ddced4ab0dbb083ee40eb11e485443e11ebe21
Gerrit-Change-Number: 1221502
Gerrit-PatchSet: 1
Gerrit-Owner: mwatts(a)redhat.com