806744b7c8
Since `sock_impl_opts` was added to `sock_opts` Can remove `ktls` and `tls_version` from spdk_sock_opts Example: rpc.py sock_impl_set_options -i ssl --enable-ktls rpc.py sock_impl_set_options -i ssl --disable-ktls rpc.py sock_impl_set_options -i ssl --tls-version=12 ./build/examples/perf --enable-ktls ./build/examples/perf --disable-ktls ./build/examples/perf --tls-version=12 Check kTLS statistics here: /proc/net/tls_stat Change-Id: Icf7ee822bad92fda149710be77feb77fc8d4f163 Signed-off-by: Boris Glimcher <Boris.Glimcher@emc.com> Reviewed-on: https://review.spdk.io/gerrit/c/spdk/spdk/+/13510 Tested-by: SPDK CI Jenkins <sys_sgci@intel.com> Community-CI: Mellanox Build Bot Reviewed-by: Konrad Sztyber <konrad.sztyber@intel.com> Reviewed-by: Jim Harris <james.r.harris@intel.com>
91 lines
2.7 KiB
Bash
Executable File
91 lines
2.7 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
|
|
testdir=$(readlink -f $(dirname $0))
|
|
rootdir=$(readlink -f $testdir/../../..)
|
|
|
|
source $rootdir/test/common/autotest_common.sh
|
|
source $rootdir/test/nvmf/common.sh
|
|
|
|
rpc_py="$rootdir/scripts/rpc.py"
|
|
|
|
nvmftestinit
|
|
nvmfappstart -m 0x2 --wait-for-rpc
|
|
|
|
if [ "$TEST_TRANSPORT" != tcp ]; then
|
|
echo "Unsupported transport: $TEST_TRANSPORT"
|
|
exit 0
|
|
fi
|
|
|
|
$rpc_py sock_set_default_impl -i ssl
|
|
|
|
# Check default TLS version
|
|
version=$($rpc_py sock_impl_get_options -i ssl | jq -r .tls_version)
|
|
if [[ "$version" != "0" ]]; then
|
|
echo "TLS version was not set correctly $version != 0"
|
|
exit 1
|
|
fi
|
|
|
|
# Check TLS version set to 13
|
|
$rpc_py sock_impl_set_options -i ssl --tls-version 13
|
|
version=$($rpc_py sock_impl_get_options -i ssl | jq -r .tls_version)
|
|
if [[ "$version" != "13" ]]; then
|
|
echo "TLS version was not set correctly $version != 13"
|
|
exit 1
|
|
fi
|
|
|
|
# Check TLS version set to 12
|
|
$rpc_py sock_impl_set_options -i ssl --tls-version 12
|
|
version=$($rpc_py sock_impl_get_options -i ssl | jq -r .tls_version)
|
|
if [[ "$version" != "12" ]]; then
|
|
echo "TLS version was not set correctly $version != 12"
|
|
exit 1
|
|
fi
|
|
|
|
# Check incorrect TLS version set to 7
|
|
$rpc_py sock_impl_set_options -i ssl --tls-version 7
|
|
version=$($rpc_py sock_impl_get_options -i ssl | jq -r .tls_version)
|
|
if [[ "$version" != "7" ]]; then
|
|
echo "TLS version was not set correctly $version != 7"
|
|
exit 1
|
|
fi
|
|
|
|
# Check default KTLS is disabled
|
|
ktls=$($rpc_py sock_impl_get_options -i ssl | jq -r .enable_ktls)
|
|
if [[ "$ktls" != "false" ]]; then
|
|
echo "KTLS was not set correctly $ktls != false"
|
|
exit 1
|
|
fi
|
|
|
|
# Check KTLS enable
|
|
$rpc_py sock_impl_set_options -i ssl --enable-ktls
|
|
ktls=$($rpc_py sock_impl_get_options -i ssl | jq -r .enable_ktls)
|
|
if [[ "$ktls" != "true" ]]; then
|
|
echo "KTLS was not set correctly $ktls != true"
|
|
exit 1
|
|
fi
|
|
|
|
# Check KTLS disable
|
|
$rpc_py sock_impl_set_options -i ssl --disable-ktls
|
|
ktls=$($rpc_py sock_impl_get_options -i ssl | jq -r .enable_ktls)
|
|
if [[ "$ktls" != "false" ]]; then
|
|
echo "KTLS was not set correctly $ktls != false"
|
|
exit 1
|
|
fi
|
|
|
|
$rpc_py sock_impl_set_options -i ssl --tls-version 13
|
|
$rpc_py framework_start_init
|
|
$rpc_py nvmf_create_transport $NVMF_TRANSPORT_OPTS
|
|
$rpc_py nvmf_create_subsystem nqn.2016-06.io.spdk:cnode1 -a -s SPDK00000000000001 -m 10
|
|
$rpc_py nvmf_subsystem_add_listener nqn.2016-06.io.spdk:cnode1 -t $TEST_TRANSPORT \
|
|
-a $NVMF_FIRST_TARGET_IP -s $NVMF_PORT
|
|
$rpc_py bdev_malloc_create 32 4096 -b malloc0
|
|
$rpc_py nvmf_subsystem_add_ns nqn.2016-06.io.spdk:cnode1 malloc0 -n 1
|
|
|
|
# Send IO
|
|
"${NVMF_TARGET_NS_CMD[@]}" $SPDK_EXAMPLE_DIR/perf -S ssl -q 64 -o 4096 -w randrw -M 30 -t 10 \
|
|
-r "trtype:${TEST_TRANSPORT} adrfam:IPv4 traddr:${NVMF_FIRST_TARGET_IP} trsvcid:${NVMF_PORT} \
|
|
subnqn:nqn.2016-06.io.spdk:cnode1"
|
|
|
|
trap - SIGINT SIGTERM EXIT
|
|
nvmftestfini
|