Page MenuHomeFreeBSD

Don't check the auth algorithm for GCM.
ClosedPublic

Authored by jhb on Feb 13 2020, 8:37 PM.
Tags
None
Referenced Files
F154673167: D23671.id.diff
Wed, Apr 29, 5:00 AM
Unknown Object (File)
Tue, Apr 28, 3:41 AM
Unknown Object (File)
Tue, Apr 28, 12:56 AM
Unknown Object (File)
Tue, Apr 21, 11:03 AM
Unknown Object (File)
Mon, Apr 20, 4:32 AM
Unknown Object (File)
Sun, Apr 19, 1:46 PM
Unknown Object (File)
Sat, Apr 11, 8:47 AM
Unknown Object (File)
Thu, Apr 9, 7:25 PM
Subscribers

Details

Summary

The upstream OpenSSL changes only set the cipher for GCM since the
authentication is redundant, and changes to OCF will soon remove
the GCM authentication algorithm constants entirely for the same
reason. In addition, ktls_create_session() already validates these
fields and wouldn't pass down an invalid auth_algorithm value to
any drivers or ktls backends.

Diff Detail

Repository
rS FreeBSD src repository - subversion
Lint
Lint Not Applicable
Unit
Tests Not Applicable