HomeFreeBSD

cxgbe tom: Remove support for non-KTLS TLS offload.

Description

cxgbe tom: Remove support for non-KTLS TLS offload.

TOE TLS offload was first supported via a customized OpenSSL developed
by Chelsio with proprietary socket options prior to KTLS being present
either in FreeBSD or upstream OpenSSL. With the addition of KTLS in
both places, cxgbe's TOE driver was extended to support TLS offload
via KTLS as well. This change removes the older interface leaving
only the KTLS bindings for TOE TLS.

Since KTLS was added to TOE TLS second, it was somehat shoe-horned
into the existing code. In addition to removing the non-KTLS TLS
offload, refactor and simplify the code to assume KTLS, e.g. not
copying keys into a helper structure that mimic'ed the non-KTLS mode,
but using the KTLS session object directly when constructing key
contexts.

This also removes some unused code to send TX keys inline in work
requests for TOE TLS. This code was never enabled, and was arguably
sending the wrong thing (it was not sending the raw key context as we
do for NIC TLS when using inline keys).

Sponsored by: Chelsio Communications

(cherry picked from commit 789f2d4b3f33d4414eaf0b4e7daef41e89d1b224)

Details

Provenance
jhbAuthored on May 28 2021, 11:49 PM
Parents
rG72845ee316ec: depend-cleanup.sh: Handle kqtest being renamed to kqueue_test.
Branches
Unknown
Tags
Unknown