Track session objects in the framework, and pass handles between the framework (OCF), consumers, and drivers. Avoid redundancy and complexity in individual drivers by allocating session memory in the framework and providing it to drivers in ::newsession(). Session handles are no longer integers with information encoded in various high bits. Use of the CRYPTO_SESID2FOO() macros should be replaced with the appropriate crypto_ses2foo() function on the opaque session handle. Convert OCF drivers (in particular, cryptosoft, as well as myriad others) to the opaque handle interface. Discard existing session tracking as much as possible (quick pass). There may be additional code ripe for deletion. Convert OCF consumers (ipsec, geom_eli, krb5, cryptodev) to handle-style interface. The conversion is largely mechnical. The change is documented in crypto.9. Inspired by https://lists.freebsd.org/pipermail/freebsd-arch/2018-January/018835.html . No objection from: ae (ipsec portion) Reported by: jhb |
||
---|---|---|
.. | ||
krb5 | ||
gss_accept_sec_context.c | ||
gss_acquire_cred.c | ||
gss_add_oid_set_member.c | ||
gss_canonicalize_name.c | ||
gss_create_empty_oid_set.c | ||
gss_delete_sec_context.c | ||
gss_display_status.c | ||
gss_export_name.c | ||
gss_get_mic.c | ||
gss_impl.c | ||
gss_import_name.c | ||
gss_init_sec_context.c | ||
gss_names.c | ||
gss_pname_to_uid.c | ||
gss_release_buffer.c | ||
gss_release_cred.c | ||
gss_release_name.c | ||
gss_release_oid_set.c | ||
gss_set_cred_option.c | ||
gss_test_oid_set_member.c | ||
gss_unwrap.c | ||
gss_verify_mic.c | ||
gss_wrap_size_limit.c | ||
gss_wrap.c | ||
gssapi_impl.h | ||
gssapi.h | ||
gssd_prot.c | ||
gssd.x | ||
gsstest.c | ||
kgss_if.m |