]> git.ipfire.org Git - thirdparty/kernel/stable.git/commitdiff
SUNRPC: Add Kconfig dependency on CRYPTO_KRB5
authorChuck Lever <chuck.lever@oracle.com>
Mon, 27 Apr 2026 13:50:45 +0000 (09:50 -0400)
committerChuck Lever <cel@kernel.org>
Tue, 9 Jun 2026 20:32:59 +0000 (16:32 -0400)
The rpcsec_gss_krb5 module currently contains its own Kerberos 5
crypto implementation (key derivation, encryption, checksumming)
that duplicates functionality available in the common crypto/krb5
library. As a first step toward migrating to that library, add a
Kconfig select so that building rpcsec_gss_krb5 pulls in the
common Kerberos 5 crypto support.

The per-enctype Kconfig options (AES_SHA1, CAMELLIA, AES_SHA2)
remain: they continue to gate which encryption types are offered
by the GSS mechanism. The individual crypto algorithm selects
they carry become redundant once the migration is complete, since
CRYPTO_KRB5 already selects all needed ciphers and hashes.

Assisted-by: Claude:claude-opus-4-6
Reviewed-by: Jeff Layton <jlayton@kernel.org>
Acked-by: Anna Schumaker <anna.schumaker@hammerspace.com>
Signed-off-by: Chuck Lever <chuck.lever@oracle.com>
net/sunrpc/Kconfig

index a570e7adf270fb8976f751266bbffe39ef696c6a..381e76975ea94e184e4da84f2fc493229a13e7d1 100644 (file)
@@ -21,6 +21,7 @@ config RPCSEC_GSS_KRB5
        depends on SUNRPC && CRYPTO
        default y
        select SUNRPC_GSS
+       select CRYPTO_KRB5
        select CRYPTO_SKCIPHER
        select CRYPTO_HASH
        help