mirror of
https://github.com/opnsense/src.git
synced 2026-05-21 01:19:38 -04:00
The kernel changes needed for nfs-over-tls have been committed to main.
However, nfs-over-tls requires user space daemons to handle the
TLS handshake and other non-application data TLS records.
There is one daemon (rpc.tlsclntd) for the client side and one daemon
(rpc.tlsservd) for the server side, although they share a fair amount
of code found in rpc.tlscommon.c and rpc.tlscommon.h.
They use a KTLS enabled OpenSSL to perform the actual work and, as such,
are only built when MK_OPENSSL_KTLS is set.
Communication with the kernel is done via upcall RPCs done on AF_LOCAL
sockets and the custom system call rpctls_syscall.
Relnotes: yes
(cherry picked from commit
|
||
|---|---|---|
| .. | ||
| Makefile | ||
| rpc.tlscommon.c | ||
| rpc.tlscommon.h | ||
| rpc.tlsservd.8 | ||
| rpc.tlsservd.c | ||