]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
projects / thirdparty / kernel / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 8ab523c) | patch
NFS: Check the TLS certificate fields in nfs_match_client()
authorTrond Myklebust <trond.myklebust@hammerspace.com>
Sun, 19 Oct 2025 00:10:36 +0000 (20:10 -0400)
committerAnna Schumaker <anna.schumaker@oracle.com>
Mon, 10 Nov 2025 15:32:28 +0000 (10:32 -0500)
commitfb2cba0854a7f315c8100a807a6959b99d72479e
tree53ea216e619e7781724c2a3181750a698e12e973tree | snapshot
parent8ab523ce78d4ca13add6b4ecbacff0f84c274603commit | diff
NFS: Check the TLS certificate fields in nfs_match_client()

If the TLS security policy is of type RPC_XPRTSEC_TLS_X509, then the
cert_serial and privkey_serial fields need to match as well since they
define the client's identity, as presented to the server.

Fixes: 90c9550a8d65 ("NFS: support the kernel keyring for TLS")
Signed-off-by: Trond Myklebust <trond.myklebust@hammerspace.com>
Signed-off-by: Anna Schumaker <anna.schumaker@oracle.com>
fs/nfs/client.c diff | blob | blame | history
A mirror of Linus' kernel repository