HomeFreeBSD

Add a new "tlscertname" NFS mount option.

Description

Add a new "tlscertname" NFS mount option.

When using NFS-over-TLS, an NFS client can optionally provide an X.509
certificate to the server during the TLS handshake. For some situations,
such as different NFS servers or different certificates being mapped
to different user credentials on the NFS server, there may be a need
for different mounts to provide different certificates.

This new mount option called "tlscertname" may be used to specify a
non-default certificate be provided. This alernate certificate will
be stored in /etc/rpc.tlsclntd in a file with a name based on what is
provided by this mount option.

Details

Provenance
rmacklemAuthored on Dec 21 2020, 11:14 PM
Parents
rGe52326210786: [if_dwc] add support for multi-descriptor packets in TX path
Branches
Unknown
Tags
Unknown