Skip to content

nvme: expose tls mode in use#3225

Open
igaw wants to merge 1 commit intolinux-nvme:masterfrom
igaw:tls-mode
Open

nvme: expose tls mode in use#3225
igaw wants to merge 1 commit intolinux-nvme:masterfrom
igaw:tls-mode

Conversation

@igaw
Copy link
Copy Markdown
Collaborator

@igaw igaw commented Apr 1, 2026

It is not possible to determine the active TLS mode from the presence or absence of sysfs attributes like tls_key, tls_configured_key, or dhchap_secret.

With the introduction of the concat mode and optional DH-CHAP authentication, different configurations can result in identical sysfs state. This makes user space detection unreliable.

Read the TLS mode used from the newly added sysfs entry.

Depends on https://lore.kernel.org/linux-nvme/20260401-expose-tls-mode-v1-1-433a83d1d23f@kernel.org/

See also: #3204

It is not possible to determine the active TLS mode from the
presence or absence of sysfs attributes like tls_key,
tls_configured_key, or dhchap_secret.

With the introduction of the concat mode and optional DH-CHAP
authentication, different configurations can result in identical
sysfs state. This makes user space detection unreliable.

Read the TLS mode used from the newly added sysfs entry.

Signed-off-by: Daniel Wagner <wagi@kernel.org>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant