Page MenuHomeFreeBSD

Don't check the auth algorithm for GCM.
ClosedPublic

Authored by jhb on Feb 13 2020, 8:37 PM.
Tags
None
Referenced Files
Unknown Object (File)
Tue, Apr 21, 11:03 AM
Unknown Object (File)
Mon, Apr 20, 4:32 AM
Unknown Object (File)
Sun, Apr 19, 1:46 PM
Unknown Object (File)
Sat, Apr 11, 8:47 AM
Unknown Object (File)
Thu, Apr 9, 7:25 PM
Unknown Object (File)
Tue, Apr 7, 4:42 AM
Unknown Object (File)
Thu, Apr 2, 5:31 AM
Unknown Object (File)
Mar 26 2026, 6:55 PM
Subscribers

Details

Summary

The upstream OpenSSL changes only set the cipher for GCM since the
authentication is redundant, and changes to OCF will soon remove
the GCM authentication algorithm constants entirely for the same
reason. In addition, ktls_create_session() already validates these
fields and wouldn't pass down an invalid auth_algorithm value to
any drivers or ktls backends.

Diff Detail

Repository
rS FreeBSD src repository - subversion
Lint
Lint Not Applicable
Unit
Tests Not Applicable