Differential D31430

security/openssl: Update KTLS patches for Chacha20-Poly1305.
ClosedPublic
Actions

Authored by jhb on Aug 5 2021, 11:26 PM.

Details

Reviewers

brnrd

Commits

R11:214d5852d425: security/openssl: Update KTLS patches for Chacha20-Poly1305

Summary

This pulls in several upstream KTLS patches from OpenSSL master:

A fix to the return values of BIO_get_ktls_*().

Support for Chacha20-Poly1305.

Replacing the SSL_MODE_NO_KTLS_* modes which opted-out of KTLS with an opt-in SSL_OP_ENABLE_KTLS. Note that this means that KTLS is not enabled by default. Users can enable KTLS via a custom OpenSSL config file that enables the KTLS option.

Diff Detail

Repository

R11 FreeBSD ports repository

Lint

Lint Not Applicable

Unit

Tests Not Applicable

Event Timeline

jhb created this revision.Aug 5 2021, 11:26 PM

Herald added a subscriber: mat. · View Herald TranscriptAug 5 2021, 11:26 PM

jhb requested review of this revision.Aug 5 2021, 11:26 PM

Harbormaster completed remote builds in B40882: Diff 93295.Aug 5 2021, 11:26 PM

Ping. I have merged all these patches into base OpenSSL.

This revision was not accepted when it landed; it landed in state Needs Review.Aug 19 2021, 2:05 PM

Closed by commit R11:214d5852d425: security/openssl: Update KTLS patches for Chacha20-Poly1305 (authored by brnrd). · Explain Why

This revision was automatically updated to reflect the committed changes.

brnrd added a commit: R11:214d5852d425: security/openssl: Update KTLS patches for Chacha20-Poly1305.

Thanks!

Builds OK, committed

Revision Contents
Changeset List

Path

Size

security/

openssl/

Makefile

2 lines

files/

extra-patch-ktls

683 lines

Diff 93937

View Options

security/openssl/Makefile