Skip to content

Conversation

chucklever
Copy link
Member

The kernel was built incorrectly (a CONFIG setting was unintentionally disabled) which resulted in add_key(2) calls failing. This in turn caused NFSD to treat all TLS connections as xprtsec=tls (no mTLS).

The problem was that CONFIG_KEYS_REQUEST_CACHE was disabled in my
test kernels.

Signed-off-by: Chuck Lever <chuck.lever@oracle.com>
Re-organize the documentation for dependencies, and add a mention
of the kernel keyring options that need to be enabled.

Signed-off-by: Chuck Lever <chuck.lever@oracle.com>
@chucklever chucklever merged commit 85666fb into main Aug 14, 2025
8 checks passed
@chucklever chucklever deleted the cel-fixes branch August 14, 2025 19:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant