nvme: rework NVME_AUTH Kconfig selection
[linux-2.6-block.git] / drivers / nvme / target / Kconfig
index 79fc64035ee30f92d88bc826f43ba00f1a3e7ef7..fa479c9f5c3d3237939ac01a2aa65128abdc0599 100644 (file)
@@ -84,16 +84,26 @@ config NVME_TARGET_TCP
 
          If unsure, say N.
 
+config NVME_TARGET_TCP_TLS
+       bool "NVMe over Fabrics TCP target TLS encryption support"
+       depends on NVME_TARGET_TCP
+       select NVME_COMMON
+       select NVME_KEYRING
+       select NET_HANDSHAKE
+       select KEYS
+       help
+         Enables TLS encryption for the NVMe TCP target using the netlink handshake API.
+
+         The TLS handshake daemon is available at
+         https://github.com/oracle/ktls-utils.
+
+         If unsure, say N.
+
 config NVME_TARGET_AUTH
        bool "NVMe over Fabrics In-band Authentication support"
        depends on NVME_TARGET
        select NVME_COMMON
-       select CRYPTO
-       select CRYPTO_HMAC
-       select CRYPTO_SHA256
-       select CRYPTO_SHA512
-       select CRYPTO_DH
-       select CRYPTO_DH_RFC7919_GROUPS
+       select NVME_AUTH
        help
          This enables support for NVMe over Fabrics In-band Authentication