[PATCH 0/4] TLS fixes for 6.18

[Trond Myklebust <trondmy@kernel.org>]

From: Trond Myklebust <trond.myklebust@hammerspace.com>

The following patches fix a couple of logic errors in the pNFS files and
flexfiles drivers' use of TLS. The first two fix logic errors which can
cause TLS-incapable protocols such as RDMA to be added to existing
TLS/TCP NFS clients.
The second patch adds fixes to ensure that the DS client TLS policy
settings match the requested transport type.
Finally, there is a fix to ensure that if the mount syscall parameters
include the "cert_serial" and "privkey_serial" options, then
nfs_match_client() will check those parameters against existing
nfs_client instances.

Trond Myklebust (4):
  pnfs: Fix TLS logic in _nfs4_pnfs_v3_ds_connect()
  pnfs: Fix TLS logic in _nfs4_pnfs_v4_ds_connect()
  pnfs: Set transport security policy to RPC_XPRTSEC_NONE unless using
    TLS
  NFS: Check the TLS certificate fields in nfs_match_client()

 fs/nfs/client.c     |  8 ++++++
 fs/nfs/nfs3client.c | 14 ++++++++--
 fs/nfs/nfs4client.c | 14 ++++++++--
 fs/nfs/pnfs_nfs.c   | 66 ++++++++++++++++++++++++---------------------
 4 files changed, 67 insertions(+), 35 deletions(-)

-- 
2.51.0