]> git.ipfire.org Git - thirdparty/linux.git/commit
smb3.1.1: enable negotiating stronger encryption by default
authorSteve French <stfrench@microsoft.com>
Wed, 28 Apr 2021 04:07:19 +0000 (23:07 -0500)
committerSteve French <stfrench@microsoft.com>
Wed, 28 Apr 2021 04:18:40 +0000 (23:18 -0500)
commitfee742b502894c8ed02506fff61d7605934f93cb
tree9b5cfe7f7c84e217a1b333af78fc8c44328764fa
parenta8a6082d4ae29d98129440c4a5de8e6ea3de0983
smb3.1.1: enable negotiating stronger encryption by default

Now that stronger encryption (gcm256) has been more broadly
tested, and confirmed to work with multiple servers (Windows
and Azure for example), enable it by default.  Although gcm256 is
the second choice we offer (after gcm128 which should be faster),
this change allows mounts to server which are configured to
require the strongest encryption to work (without changing a module
load parameter).

Signed-off-by: Steve French <stfrench@microsoft.com>
Suggested-by: Ronnie Sahlberg <lsahlber@redhat.com>
Reviewed-by: Ronnie Sahlberg <lsahlber@redhat.com>
fs/cifs/cifsfs.c