• Vakul Garg's avatar
    net/tls: Do not use async crypto for non-data records · c0ab4732
    Vakul Garg authored
    Addition of tls1.3 support broke tls1.2 handshake when async crypto
    accelerator is used. This is because the record type for non-data
    records is not propagated to user application. Also when async
    decryption happens, the decryption does not stop when two different
    types of records get dequeued and submitted for decryption. To address
    it, we decrypt tls1.2 non-data records in synchronous way. We check
    whether the record we just processed has same type as the previous one
    before checking for async condition and jumping to dequeue next record.
    
    Fixes: 130b392c ("net: tls: Add tls 1.3 support")
    Signed-off-by: default avatarVakul Garg <vakul.garg@nxp.com>
    Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
    c0ab4732
tls_sw.c 55.9 KB