Re: [PATCH 6.12.y 1/2] selftests: tls: add rekey tests

Sabrina Dubroca <[email protected]>
Newsgroups org.kernel.vger.stable
Message-ID <aoiwsTDosFh5fe2N@krikkit>
2026-08-21, 12:51:30 -0400, Sasha Levin wrote:
> On Wed, Aug 19, 2026 at 05:19:24PM +0200, Sabrina Dubroca wrote:
> > All of those rekey tests are going to fail if you don't take the rekey
> > implementation as well (which I hope isn't getting backported to any
> > stable kernels). You probably don't want that.
> 
> You're right, and thanks for catching it.
> 
> To be unambiguous about what this actually affected: the 6.12.y series
> you're replying to here was never queued, so there was nothing to drop
> on 6.12. The same selftest had, however, already been queued for 6.6
> from a separate 6.6.y posting, and that is what I've now dropped. Three

Right. I saw something for 6.6 and kind of assumed that replying to
6.12 would be enough since it should be the exact same situation
there. I won't assume next time.

> patches came out of the 6.6 queue:
> 
>   - selftests: tls: add rekey tests (555f0edb9ff0)
>   - selftests: tls: add test with a partially invalid iov (dc54b813df63)
>   - tls: rx: restore msg_iter before TLS 1.3 optimistic retry (1c8629651cb5)

Sounds ok. I guess you could still backport the retry fix, you would
just get a trivial conflict on the selftest because the context
changed, but it's a minor behavioral bug.

> On 6.6 it's worse than the tests failing - the selftest doesn't even
> build. tls_crypto_info_init() only grew its key_generation argument in
> b2e584aa3c71, which isn't in 6.6, so the ~20 four-argument call sites

Yes, that was also part of the rekey series.

> the rekey patch adds fail to compile, and __test_passed() (69fe8ec4f673,
> v6.9) is missing from 6.6's kselftest_harness.h. And of course the rekey
> implementation itself (0471b1093e3a, 47069594e67e, 510128b30f2d) isn't
> there, so tls_main.c still returns -EBUSY on the second setsockopt()
> that every rekey test expects to succeed.

Thanks.

-- 
Sabrina
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.