Re: [PATCH] tlshd: fix keyring cert retrieval

Sagi Grimberg <[email protected]> Sun, 3 May 2026 10:30:57 +0300

Newsgroups	dev.linux.lists.kernel-tls-handshake,org.kernel.vger.linux-nfs
Message-ID	<[email protected]>


On 01/05/2026 22:58, Scott Mayhew wrote:
> The code that gets certs from keyrings currently only gets RSA certs, so
> we need to zero out the PQ certs length fields when a keyring is used.
> Otherwise the retrieval callback will look in the wrong offset in the
> tlshd_certs list.
>
> Reported-by: Sagi Grimberg <[email protected]>
> Fixes: facd084 ("tlshd: Client-side dual certificate support")
> Fixes: 14f5349 ("tlshd: Server-side dual certificate support")
> Signed-off-by: Scott Mayhew <[email protected]>

Reviewed-by: Sagi Grimberg <[email protected]>