Page MenuHomeFreeBSD

Fix downgrading of TOE TLS sockets to plain TOE.
ClosedPublic

Authored by jhb on Dec 3 2020, 9:31 PM.
Tags
None
Referenced Files
Unknown Object (File)
Feb 28 2025, 6:30 AM
Unknown Object (File)
Feb 28 2025, 5:50 AM
Unknown Object (File)
Feb 27 2025, 9:30 PM
Unknown Object (File)
Feb 27 2025, 8:13 PM
Unknown Object (File)
Jan 19 2025, 7:31 AM
Unknown Object (File)
Dec 23 2024, 2:52 PM
Unknown Object (File)
Dec 23 2024, 2:37 PM
Unknown Object (File)
Oct 19 2024, 10:52 PM
Subscribers

Details

Summary

If a TOE TLS socket ends up using an unsupported TLS version or
ciphersuite, it must be downgraded to a "plain" TOE socket with
TLS encryption/decryption performed on the host. The previous
implementation of this fallback was incomplete and resulted in
hung connections.

Diff Detail

Repository
rS FreeBSD src repository - subversion
Lint
Lint Not Applicable
Unit
Tests Not Applicable