Page MenuHomeFreeBSD

Mark asymmetric cryptography via OCF deprecated for 14.0.
ClosedPublic

Authored by jhb on Oct 15 2020, 9:39 PM.
Tags
None
Referenced Files
Unknown Object (File)
Oct 18 2024, 9:54 AM
Unknown Object (File)
Oct 1 2024, 3:12 PM
Unknown Object (File)
Sep 30 2024, 4:12 PM
Unknown Object (File)
Sep 26 2024, 5:50 AM
Unknown Object (File)
Sep 22 2024, 10:03 PM
Unknown Object (File)
Sep 19 2024, 3:51 AM
Unknown Object (File)
Sep 7 2024, 6:30 AM
Unknown Object (File)
Sep 4 2024, 9:11 AM

Details

Summary

Only one MIPS-specific driver implements support for one of the
asymmetric operations. There are no in-kernel users besides
/dev/crypto. The only known user of the /dev/crypto interface was the
engine in OpenSSL releases before 1.1.0. 1.1.0 includes a rewritten
engine that does not use the asymmetric operations due to lack of
documentation.

Test Plan
  • a little test program that invoked these ioctls triggered warnings

Diff Detail

Repository
rS FreeBSD src repository - subversion
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

jhb requested review of this revision.Oct 15 2020, 9:39 PM
jhb created this revision.
val_packett.cool added inline comments.
share/man/man4/crypto.4
112 ↗(On Diff #78290)
sys/opencrypto/cryptodev.c
829 ↗(On Diff #78290)
848 ↗(On Diff #78290)
markj added inline comments.
sys/opencrypto/cryptodev.c
428 ↗(On Diff #78290)

As a matter of style I think it's nice to put static locals at the beginning of the declaration list.

This revision is now accepted and ready to land.Oct 16 2020, 1:41 PM

Greg has the right spelling

sys/opencrypto/cryptodev.c
349 ↗(On Diff #78290)

I'm not sure multiple warnings, repeated every minute are helpful. I recently suffered from a long-standing nag log from ICMP that timed out after a minute, and it's 55% of my /var/log/messages with 0 value. I'd just warn maybe once?

428 ↗(On Diff #78290)

+1

I even leave a blank line to separate them from other locals.

jhb marked 4 inline comments as done.Oct 19 2020, 6:17 PM
sys/opencrypto/cryptodev.c
349 ↗(On Diff #78290)

This is the same logic we use for the deprecated symmetric crypto in stable/{11,12} now for both cryptodev and IPsec. People can always adjust the sysctl to tune the warning interval if necessary. (In fact, when this is MFC'd, it will be reusing the existing warninterval already in those branches that was removed in HEAD when I purged the deprecated symmetric crypto algorithms.)

428 ↗(On Diff #78290)

We don't generally do the blank line with static locals (and I think the original location was just to match what was done previously for the symmetric warnings), but I'm happy to move it up.