Whamcloud - gitweb
LU-8590 gss: Move DH parameter generation out of upcall
This change adds the Diffie-Hellman parameter generation to the
lgss_sk utility prior to key loading. The parameters are now
persistent to prevent long DH parameter generation times which
can cause mount command and connection timeouts.
This is based on recommendations from Matt Wood at Intel's
security review.
Signed-off-by: Jeremy Filizetti <jeremy.filizetti@gmail.com>
Change-Id: Iba840168da533662ed8ec78004be9e4dc5369c68
Reviewed-on: http://review.whamcloud.com/23322
Tested-by: Jenkins
Tested-by: Maloo <hpdd-maloo@intel.com>
Reviewed-by: John L. Hammond <john.hammond@intel.com>
Reviewed-by: Andreas Dilger <andreas.dilger@intel.com>
Reviewed-by: Oleg Drokin <oleg.drokin@intel.com>