From mboxrd@z Thu Jan  1 00:00:00 1970
Received: from bombadil.infradead.org (bombadil.infradead.org [198.137.202.133])
	(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by smtp.subspace.kernel.org (Postfix) with ESMTPS id CA04F180
	for <kdevops@lists.linux.dev>; Wed, 13 Dec 2023 06:11:35 +0000 (UTC)
Authentication-Results: smtp.subspace.kernel.org; dmarc=fail (p=none dis=none) header.from=kernel.org
Authentication-Results: smtp.subspace.kernel.org; spf=none smtp.mailfrom=infradead.org
Authentication-Results: smtp.subspace.kernel.org;
	dkim=pass (2048-bit key) header.d=infradead.org header.i=@infradead.org header.b="i2B/DOdv"
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
	d=infradead.org; s=bombadil.20210309; h=Sender:In-Reply-To:Content-Type:
	MIME-Version:References:Message-ID:Subject:Cc:To:From:Date:Reply-To:
	Content-Transfer-Encoding:Content-ID:Content-Description;
	bh=GNu7OtLrrfNll///aiZRC85iQc9w7Y2AKiLehw8qKwA=; b=i2B/DOdv8la8EY5gcgG3teoZmH
	+xxfwVCqsXsOh3UKRYn4K4Xu4v9foGxVEZxGx0Q5aO1OW8HC4EzPyranUTdvzSERTBTVAMoXYgJMb
	7gaecsHGCDE2BscX+lTMNDm5HCADr9Gi2/u2nK3Cb98Q9zJBv5ebpBb0fIsGmTkY+XB+dPtT78N75
	L9YiZwb870QlolXBVnMwbmMj26vIhIYLVQJuVcphGj/4uPpiOUAMONZKqd6X4jVe3oclMggJ9AtcO
	yUoEcHQw54H5NumxBNYRgTF7wzO5Rc1yRX+sq65RXgqxv+zoH9Xh6iyPPaAkyV/myeGHSZirfPl60
	z5ocwB+A==;
Received: from mcgrof by bombadil.infradead.org with local (Exim 4.96 #2 (Red Hat Linux))
	id 1rDISz-00Dju5-1d;
	Wed, 13 Dec 2023 06:11:33 +0000
Date: Tue, 12 Dec 2023 22:11:33 -0800
From: Luis Chamberlain <mcgrof@kernel.org>
To: Jeff Layton <jlayton@kernel.org>
Cc: Chuck Lever <chuck.lever@oracle.com>, kdevops@lists.linux.dev
Subject: Re: [PATCH kdevops] ktls: allow setting up hosts with tlshd
Message-ID: <ZXlLFSLJY5ovCBBS@bombadil.infradead.org>
References: <20231212-ktls-v1-1-acfba0d36f75@kernel.org>
Precedence: bulk
X-Mailing-List: kdevops@lists.linux.dev
List-Id: <kdevops.lists.linux.dev>
List-Subscribe: <mailto:kdevops+subscribe@lists.linux.dev>
List-Unsubscribe: <mailto:kdevops+unsubscribe@lists.linux.dev>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <20231212-ktls-v1-1-acfba0d36f75@kernel.org>
Sender: Luis Chamberlain <mcgrof@infradead.org>

On Tue, Dec 12, 2023 at 02:35:38PM -0500, Jeff Layton wrote:
> Add a new option to the post-install "goals" phase to configure tlshd
> for TLS handshake upcalls. This adds a new playbook to build a CA,
> generate certs for the hosts, and then configure tlshd to use them.
> 
> Finally, it also adds a new NFS fstests option to test RPC over TLS
> (using xprtsec=mtls).
> 
> Signed-off-by: Jeff Layton <jlayton@kernel.org>

Reviewed-by: Luis Chamberlain <mcgrof@kernel.org>

All looks good to me.

  Luis