libnvmf_insert_tls_key_compat-libnvme3(2)

NAME

libnvmf_insert_tls_key_compat - Derive and insert a TLS PSK

SYNOPSIS

int libnvmf_insert_tls_key_compat (struct libnvme_global_ctx *ctx , const char *keyring , const char *key_type , const char *hostnqn , const char *subsysnqn , int version , enum libnvmf_hmac_alg hmac , unsigned char *configured_key , int key_len , long *key );

ARGUMENTS

ctx

struct libnvme_global_ctx object

keyring

Keyring to use

key_type

Type of the resulting key

hostnqn

Host NVMe Qualified Name

subsysnqn

Subsystem NVMe Qualified Name

version

TLS PSK identity version to use

hmac

HMAC algorithm

configured_key

Configured PSK to derive the retained PSK from

key_len

Length of configured_key

key

Key serial to return

DESCRIPTION

Derives a retained PSK from configured_key and, from that, the TLS PSK and its identity as specified in the NVMe TCP Transport Specification 1.3, section 3.6.1.3. Stores the TLS PSK as type key_type under that identity in the keyring specified by keyring. This function differs from libnvmf_insert_tls_key_versioned in that it uses the original implementation for HKDF Expand-Label which does not prefix the 'info' and 'label' strings with the length.

version selects the identity version: 0 is obsolete and defined in the NVMe TCP Transport Specification 1.0, 1 is TLS 1.3 with the PSK digest in the identity.

RETURN

0 on success, negative error code otherwise.