6212597bda
Note, this change only sets defaults for the ID/KEY, more specific use cases like NVMe/TCP may set the ID and KEY on a per connection basis. Also simplify PSK identity string, that isn't NVMe focused. NVMe libraries using this will need to construct more complicated identity strings and pass them to the sock layer. Example: rpc.py sock_impl_set_options -i ssl --psk-key 4321DEADBEEF1234 rpc.py sock_impl_set_options -i ssl --psk-identity psk.spdk.io ./build/examples/perf --psk-key 4321DEADBEEF1234 --psk-identity psk.spdk.io ./build/examples/hello_sock --psk-key 4321DEADBEEF1234 --psk-identity psk.spdk.io Change-Id: I1cb5b0b706bdeafbccbc71f8320bc8e2961cbb55 Signed-off-by: Boris Glimcher <Boris.Glimcher@emc.com> Reviewed-on: https://review.spdk.io/gerrit/c/spdk/spdk/+/13759 Reviewed-by: Jim Harris <james.r.harris@intel.com> Reviewed-by: Ben Walker <benjamin.walker@intel.com> Reviewed-by: Paul Luse <paul.e.luse@intel.com> Tested-by: SPDK CI Jenkins <sys_sgci@intel.com> Community-CI: Mellanox Build Bot
121 lines
3.7 KiB
Bash
Executable File
121 lines
3.7 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
|
|
testdir=$(readlink -f $(dirname $0))
|
|
rootdir=$(readlink -f $testdir/../../..)
|
|
|
|
source $rootdir/test/common/autotest_common.sh
|
|
source $rootdir/test/nvmf/common.sh
|
|
|
|
rpc_py="$rootdir/scripts/rpc.py"
|
|
|
|
nvmftestinit
|
|
nvmfappstart -m 0x2 --wait-for-rpc
|
|
|
|
if [ "$TEST_TRANSPORT" != tcp ]; then
|
|
echo "Unsupported transport: $TEST_TRANSPORT"
|
|
exit 0
|
|
fi
|
|
|
|
$rpc_py sock_set_default_impl -i ssl
|
|
|
|
# Check default TLS version
|
|
version=$($rpc_py sock_impl_get_options -i ssl | jq -r .tls_version)
|
|
if [[ "$version" != "0" ]]; then
|
|
echo "TLS version was not set correctly $version != 0"
|
|
exit 1
|
|
fi
|
|
|
|
# Check TLS version set to 13
|
|
$rpc_py sock_impl_set_options -i ssl --tls-version 13
|
|
version=$($rpc_py sock_impl_get_options -i ssl | jq -r .tls_version)
|
|
if [[ "$version" != "13" ]]; then
|
|
echo "TLS version was not set correctly $version != 13"
|
|
exit 1
|
|
fi
|
|
|
|
# Check TLS version set to 12
|
|
$rpc_py sock_impl_set_options -i ssl --tls-version 12
|
|
version=$($rpc_py sock_impl_get_options -i ssl | jq -r .tls_version)
|
|
if [[ "$version" != "12" ]]; then
|
|
echo "TLS version was not set correctly $version != 12"
|
|
exit 1
|
|
fi
|
|
|
|
# Check incorrect TLS version set to 7
|
|
$rpc_py sock_impl_set_options -i ssl --tls-version 7
|
|
version=$($rpc_py sock_impl_get_options -i ssl | jq -r .tls_version)
|
|
if [[ "$version" != "7" ]]; then
|
|
echo "TLS version was not set correctly $version != 7"
|
|
exit 1
|
|
fi
|
|
|
|
# Check default KTLS is disabled
|
|
ktls=$($rpc_py sock_impl_get_options -i ssl | jq -r .enable_ktls)
|
|
if [[ "$ktls" != "false" ]]; then
|
|
echo "KTLS was not set correctly $ktls != false"
|
|
exit 1
|
|
fi
|
|
|
|
# Check KTLS enable
|
|
$rpc_py sock_impl_set_options -i ssl --enable-ktls
|
|
ktls=$($rpc_py sock_impl_get_options -i ssl | jq -r .enable_ktls)
|
|
if [[ "$ktls" != "true" ]]; then
|
|
echo "KTLS was not set correctly $ktls != true"
|
|
exit 1
|
|
fi
|
|
|
|
# Check KTLS disable
|
|
$rpc_py sock_impl_set_options -i ssl --disable-ktls
|
|
ktls=$($rpc_py sock_impl_get_options -i ssl | jq -r .enable_ktls)
|
|
if [[ "$ktls" != "false" ]]; then
|
|
echo "KTLS was not set correctly $ktls != false"
|
|
exit 1
|
|
fi
|
|
|
|
# Check default PSK key
|
|
key=$($rpc_py sock_impl_get_options -i ssl | jq -r .psk_key)
|
|
if [[ "$key" != "null" ]]; then
|
|
echo "TLS default key should be empty and not $key"
|
|
exit 1
|
|
fi
|
|
|
|
# Check default PSK key set
|
|
$rpc_py sock_impl_set_options -i ssl --psk-key 1234567890ABCDEF
|
|
key=$($rpc_py sock_impl_get_options -i ssl | jq -r .psk_key)
|
|
if [[ "$key" != "1234567890ABCDEF" ]]; then
|
|
echo "TLS key was not set correctly $key != 1234567890ABCDEF"
|
|
exit 1
|
|
fi
|
|
|
|
# Check default PSK identity
|
|
identity=$($rpc_py sock_impl_get_options -i ssl | jq -r .psk_identity)
|
|
if [[ "$identity" != "null" ]]; then
|
|
echo "TLS default identity should be empty and not $identity"
|
|
exit 1
|
|
fi
|
|
|
|
# Check default PSK identity set
|
|
$rpc_py sock_impl_set_options -i ssl --psk-identity psk.spdk.io
|
|
identity=$($rpc_py sock_impl_get_options -i ssl | jq -r .psk_identity)
|
|
if [[ "$identity" != "psk.spdk.io" ]]; then
|
|
echo "PSK ID was not set correctly $identity != psk.spdk.io"
|
|
exit 1
|
|
fi
|
|
|
|
$rpc_py sock_impl_set_options -i ssl --tls-version 13
|
|
$rpc_py framework_start_init
|
|
$rpc_py nvmf_create_transport $NVMF_TRANSPORT_OPTS
|
|
$rpc_py nvmf_create_subsystem nqn.2016-06.io.spdk:cnode1 -a -s SPDK00000000000001 -m 10
|
|
$rpc_py nvmf_subsystem_add_listener nqn.2016-06.io.spdk:cnode1 -t $TEST_TRANSPORT \
|
|
-a $NVMF_FIRST_TARGET_IP -s $NVMF_PORT
|
|
$rpc_py bdev_malloc_create 32 4096 -b malloc0
|
|
$rpc_py nvmf_subsystem_add_ns nqn.2016-06.io.spdk:cnode1 malloc0 -n 1
|
|
|
|
# Send IO
|
|
"${NVMF_TARGET_NS_CMD[@]}" $SPDK_EXAMPLE_DIR/perf -S ssl -q 64 -o 4096 -w randrw -M 30 -t 10 \
|
|
-r "trtype:${TEST_TRANSPORT} adrfam:IPv4 traddr:${NVMF_FIRST_TARGET_IP} trsvcid:${NVMF_PORT} \
|
|
subnqn:nqn.2016-06.io.spdk:cnode1" --psk-key 1234567890ABCDEF --psk-identity psk.spdk.io
|
|
|
|
trap - SIGINT SIGTERM EXIT
|
|
nvmftestfini
|