Skip to content

Commit fee742b

Browse files
committed
smb3.1.1: enable negotiating stronger encryption by default
Now that stronger encryption (gcm256) has been more broadly tested, and confirmed to work with multiple servers (Windows and Azure for example), enable it by default. Although gcm256 is the second choice we offer (after gcm128 which should be faster), this change allows mounts to server which are configured to require the strongest encryption to work (without changing a module load parameter). Signed-off-by: Steve French <stfrench@microsoft.com> Suggested-by: Ronnie Sahlberg <lsahlber@redhat.com> Reviewed-by: Ronnie Sahlberg <lsahlber@redhat.com>
1 parent a8a6082 commit fee742b

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

fs/cifs/cifsfs.c

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -75,7 +75,7 @@ bool enable_oplocks = true;
7575
bool linuxExtEnabled = true;
7676
bool lookupCacheEnabled = true;
7777
bool disable_legacy_dialects; /* false by default */
78-
bool enable_gcm_256; /* false by default, change when more servers support it */
78+
bool enable_gcm_256 = true;
7979
bool require_gcm_256; /* false by default */
8080
unsigned int global_secflags = CIFSSEC_DEF;
8181
/* unsigned int ntlmv2_support = 0; */

0 commit comments

Comments
 (0)