Received-SPF: pass (google.com: domain of linux-nfs-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20;
From:   Chuck Lever III <chuck.lever@oracle.com>
To:     Benjamin Coddington <bcodding@redhat.com>
CC:     Jeff Layton <jlayton@kernel.org>,
        Rick Macklem <rmacklem@uoguelph.ca>,
        Linux NFS Mailing List <linux-nfs@vger.kernel.org>,
        "trondmy@hammerspace.com" <trondmy@hammerspace.com>
Subject: Re: [PATCH v2 00/15] RPC-with-TLS client side
Thread-Topic: [PATCH v2 00/15] RPC-with-TLS client side
Thread-Index: AQHYebVuZqvrXSpmmEGc/2a/uQZ/m6165IuAgAAUJ4CAALlYgIAA0cqAgAACuQA=
Date:   Wed, 13 Jul 2022 13:32:24 +0000
Message-ID: <053211E0-E588-49B0-B884-CA4E98C66882@oracle.com>
References: <165452664596.1496.16204212908726904739.stgit@oracle-102.nfsv4.dev>
 <c9b6787ba9154d1f4c2bf25387a35453ad20badb.camel@kernel.org>
 <F713FAF6-8910-4BA2-86C6-C5B09223AC0F@oracle.com>
 <YQBPR0101MB9742D7F0D54EB37CE9B476C4DD899@YQBPR0101MB9742.CANPRD01.PROD.OUTLOOK.COM>
 <1FDB511A-646F-4E37-B95F-F83E1ED26796@redhat.com>
In-Reply-To: <1FDB511A-646F-4E37-B95F-F83E1ED26796@redhat.com>
Accept-Language: en-US
Content-Language: en-US
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: =?us-ascii?Q?/bdm7tjbzJGLqwj9LoOzHJMKcWrIo/dfGj3Pr9+PMFJ2wR8y7Z72pgr8Qyq9?=
 =?us-ascii?Q?sMTd3yZfFe0tqhJ7iNFBr5HusnMnXGcKf4nCdINOCvRUyIwe7ZA5Sg52G8ga?=
 =?us-ascii?Q?xO0nbCALnrsUyWYvpPjSvN4I1DmFut0jV3zdkwLoCyH3jux//IzDbw/ccPwh?=
 =?us-ascii?Q?LbAcUnayzEJyMKsD3S0be236PTNAiR37QtftQoI7J/7QwrixeiL3i8mi+MKz?=
 =?us-ascii?Q?Dwif3Ye75Sevrnx39XqpPys4tlvEcu/KrkbBOWG1iLoZ8gt6xycFDhSScpDN?=
 =?us-ascii?Q?t4gSPnj+qTkgMrKrKQfMJFrmhydJZRes/mvhLUVtZbY51casiW8do1ROtFP2?=
 =?us-ascii?Q?Y9TmUfUUz61GLr381lrx5VOydUIUvNKfy77ICujoWVJcHDXCFcTDy6hap71e?=
 =?us-ascii?Q?1a8I/FokIvYu7Tj0eTdvMnMZ8ANSpFQLP9kZw4ia4h+4CTDrTUYIJs5RUfOS?=
 =?us-ascii?Q?x5V3hfDNYbSyUxnVjHvHcoxYRebfuWVVZfRbsuLB5OkviIOq9VQe7WvFYIVO?=
 =?us-ascii?Q?xtNUsnCrWrYFwBK21bMxplpqKCgr/4YiaCw+IeLB1NoHhGB+iVB1bHHDyChN?=
 =?us-ascii?Q?0LAhN9nn5Y3tEBTRAebKAh93Gw+eyj+Q4oRDKpewbF49fbUv5tZaQfkaZzQi?=
 =?us-ascii?Q?Z/+0fIqc0uiEuASutyu4XqBPLCu0TqOkkb+n42WPNJKsDo/gP41pp50Bz9nE?=
 =?us-ascii?Q?uffkDIrIKmdbE4njRDh4gsg+U9UOtjv+qSe7fMd6mVenaiEJw3bdrsbmjism?=
 =?us-ascii?Q?lwL5EoLxE3uxWa6pwfwYHjioYs1Hksm0nIIUAc6Rr3DwM+CKxQSjWtmuEdPp?=
 =?us-ascii?Q?dibxZagl0X44CXAmp3TlTedxrA3GpxwxhxB8lPeDafHOBkd3AUJF3Qsw4R0Q?=
 =?us-ascii?Q?g78kNJ5CNO5t2ZG6HdHodjTnNY7C3XFVIzzZ8FK0t1mzpfvbkV9fZxvzKzzp?=
 =?us-ascii?Q?wujL5QJiTPBZ1f1XLVB4f9C8VM1xalRY9O4hyomkUMc7+2F3Vz3z7syVfl52?=
 =?us-ascii?Q?sDhlb9OrLH4Bxxh0pH4R6cF9MXXYt3xjrTEvCVeyhv/LorQOQ6T6g0gD3OW5?=
 =?us-ascii?Q?P4j1Git1kguRuUgEY1OMEfH7necLz7jLyJMFE6uZfyqg8GD0laSqPmW0/cvt?=
 =?us-ascii?Q?Pyzi2nrvfS5ISEII7Cnwnzg7DA/IY3N4fBDZkdsn+XS0c4x04JCJa4EicnRn?=
 =?us-ascii?Q?MbrkkXIhHFaU1YSnVZLhMAhrGVZ/W+H/IT7mm7Z4rdeepA1VazJZoeqP9u27?=
 =?us-ascii?Q?SqMuHwJpakMYek6eNgTgSUW7UKgz0XRXqj1tynPBv3YnQDYMcu9cLhYcaBid?=
 =?us-ascii?Q?xN5V2wx/iD8PTufAVoH0ZTFDokXA+RMVpXmFtRXcg0a9iVkW8DxcNVC5bddT?=
 =?us-ascii?Q?+ahOCbGs5xgUlJXBx7my86OicqUG9FZnGp9MO6co/E1WPsgKgDw6AJK+AlN+?=
 =?us-ascii?Q?qLr/vOxnA0Qtri2ynYQ73vQtfgcYSp5H60PHAE9oWz3OO/N/HlT6Cx1iUGUM?=
 =?us-ascii?Q?O9db5+bP0gVbbx40Oj0j2fN+1VUwLYc8p7rnx/zfHNo+zbZ9QCVXC4vJ95Tc?=
 =?us-ascii?Q?wtSgvXG+985yGfG9vJcv7fTW48hMxLncEhVqzpUlcgIVdn+FQxck4TCr8IFx?=
 =?us-ascii?Q?yw=3D=3D?=
Content-Type: text/plain; charset="us-ascii"
Content-ID: <BE2998C8A526D442B883D32791225219@namprd10.prod.outlook.com>
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginatorOrg: oracle.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: BN0PR10MB5128.namprd10.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 1ebaa42d-2106-4fd5-f919-08da64d41f3d
X-MS-Exchange-CrossTenant-originalarrivaltime: 13 Jul 2022 13:32:24.6033
 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 4e2c6054-71cb-48f1-bd6c-3a9705aca71b
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: 735Q4zAgdJv/GXmMXVfPO4dgswLIz2HNgp8ZuBznnr11YbXWoI5G/pSGvSTKwzjankB44hMnKyiTYJ7udeAyug==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM5PR1001MB2393
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.517,18.0.883
 definitions=2022-07-13_03:2022-07-13,2022-07-13 signatures=0
X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 malwarescore=0 phishscore=0
 mlxlogscore=770 suspectscore=0 adultscore=0 mlxscore=0 spamscore=0
 bulkscore=0 classifier=spam adjust=0 reason=mlx scancount=1
 engine=8.12.0-2206140000 definitions=main-2207130054
X-Proofpoint-ORIG-GUID: t2E1qJe1igI2ZU78YEZhv8DjfgvyPjRR
X-Proofpoint-GUID: t2E1qJe1igI2ZU78YEZhv8DjfgvyPjRR
X-Spam-Status: No, score=-2.8 required=5.0 tests=BAYES_00,DKIM_SIGNED,
        DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,RCVD_IN_DNSWL_LOW,
        RCVD_IN_MSPIKE_H2,SPF_HELO_NONE,SPF_NONE,T_SCC_BODY_TEXT_LINE
        autolearn=ham autolearn_force=no version=3.4.6
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on
        lindbergh.monkeyblade.net
Precedence: bulk
List-ID: <linux-nfs.vger.kernel.org>
X-Mailing-List: linux-nfs@vger.kernel.org


> On Jul 13, 2022, at 9:22 AM, Benjamin Coddington <bcodding@redhat.com> wr=
ote:
>=20
> On 12 Jul 2022, at 20:51, Rick Macklem wrote:
>=20
>> As I already posted to Jeff, I can put the server up for
>> a day or two at any time anyone would like to test
>> against it.
>>=20
>> It now does TLS1.3 and I'll note the one thing the
>> server did that caught the FreeBSD client "off guard"
>> was it sends a couple of post handshake handshake
>> records. (The FreeBSD client now just tosses these away.)
>>=20
>> Just email if/when you'd like to test, rick
>=20
> Hey Chuck, is the bakeathon root or intermediate certificate published
> somewhere so we can add them to our trust stores?

oracle-102:/export has the bundle and instructions, some of them in English=
! :-D

--
Chuck Lever