Page MenuHomeFreeBSD

Don't check the auth algorithm for GCM.
ClosedPublic

Authored by jhb on Feb 13 2020, 8:37 PM.
Tags
None
Referenced Files
Unknown Object (File)
Fri, Oct 10, 6:13 AM
Unknown Object (File)
Sat, Oct 4, 1:13 AM
Unknown Object (File)
Fri, Oct 3, 11:05 AM
Unknown Object (File)
Mon, Sep 29, 12:43 AM
Unknown Object (File)
Wed, Sep 17, 2:27 AM
Unknown Object (File)
Aug 13 2025, 8:10 AM
Unknown Object (File)
Aug 8 2025, 11:08 PM
Unknown Object (File)
Jul 27 2025, 1:28 PM
Subscribers

Details

Summary

The upstream OpenSSL changes only set the cipher for GCM since the
authentication is redundant, and changes to OCF will soon remove
the GCM authentication algorithm constants entirely for the same
reason. In addition, ktls_create_session() already validates these
fields and wouldn't pass down an invalid auth_algorithm value to
any drivers or ktls backends.

Diff Detail

Repository
rS FreeBSD src repository - subversion
Lint
Lint Not Applicable
Unit
Tests Not Applicable