ktls: Add simple transmit tests of kernel TLS.

Note that these tests test the kernel TLS functionality directly. Rather than using OpenSSL to perform negotiation and generate keys, these tests generate random keys send data over a pair of TCP sockets manually decrypting the TLS records generated by the kernel. Reviewed by: markj Sponsored by: Netflix Differential Revision: https://reviews.freebsd.org/D32652 (cherry picked from commit a10482e)
freebsd · Nov 23, 2021 · 71e6792 · 71e6792
1 parent 81b6dba
commit 71e6792
Show file tree

Hide file tree

Showing 2 changed files with 1,035 additions and 0 deletions.
diff --git a/tests/sys/kern/Makefile b/tests/sys/kern/Makefile
@@ -12,6 +12,7 @@ ATF_TESTS_C+=	kern_copyin
 ATF_TESTS_C+=	kern_descrip_test
 ATF_TESTS_C+=	fdgrowtable_test
 ATF_TESTS_C+=	kill_zombie
+ATF_TESTS_C+=	ktls_test
 ATF_TESTS_C+=	ptrace_test
 TEST_METADATA.ptrace_test+=		timeout="15"
 ATF_TESTS_C+=	reaper
@@ -46,6 +47,7 @@ LIBADD.sys_getrandom+=			pthread
 LIBADD.ptrace_test+=			pthread
 LIBADD.unix_seqpacket_test+=		pthread
 LIBADD.kcov+=				pthread
+LIBADD.ktls_test+=			crypto
 LIBADD.sendfile_helper+=		pthread
 LIBADD.fdgrowtable_test+=		util pthread kvm procstat