Whamcloud - gitweb
LU-12894 sec: fix checksum for skpi 28/37028/2
authorSebastien Buisson <sbuisson@ddn.com>
Tue, 29 Oct 2019 09:32:22 +0000 (18:32 +0900)
committerOleg Drokin <green@whamcloud.com>
Fri, 20 Dec 2019 06:44:34 +0000 (06:44 +0000)
commit6fcc581a3434c3a7651515b694c675d199ea0609
treea69365bb4335933eb61c5f1c61cee5b3c6d78771
parentf549927ea633b910a8c788fa970af742b3bf10c1
LU-12894 sec: fix checksum for skpi

Compute checkum on message before actually comparing
it to hmac value.

Add test to exercise all SSK flavors.
Make sure zconf_mount does include skpath mount option if SSK or
Kerberos is in use.

Lustre-change: https://review.whamcloud.com/36604
Lustre-commit: dcdf060342e7d69b64171840cf9475bf65d036ea

Fixes: a21c13d4df ("LU-8602 gss: Properly port gss to newer crypto api.")
Test-Parameters: envdefinitions=SHARED_KEY=true testlist=sanity-sec
Test-Parameters: envdefinitions=SHARED_KEY=true,SK_FLAVOR=skn testlist=sanity,recovery-small
Test-Parameters: envdefinitions=SHARED_KEY=true,SK_FLAVOR=ska testlist=sanity,recovery-small
Test-Parameters: envdefinitions=SHARED_KEY=true,SK_FLAVOR=ski testlist=sanity,recovery-small
Test-Parameters: envdefinitions=SHARED_KEY=true,SK_FLAVOR=skpi testlist=sanity,recovery-small
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
Change-Id: I7bcc3618c1824a0f0ca73219c7ac0ccc8405b946
Reviewed-on: https://review.whamcloud.com/37028
Tested-by: jenkins <devops@whamcloud.com>
Tested-by: Maloo <maloo@whamcloud.com>
Reviewed-by: Andreas Dilger <adilger@whamcloud.com>
lustre/ptlrpc/gss/gss_sk_mech.c
lustre/tests/sanity-sec.sh
lustre/tests/test-framework.sh