This pulls in several upstream KTLS patches from OpenSSL master:
- A fix to the return values of BIO_get_ktls_*().
- Support for Chacha20-Poly1305.
- Replacing the SSL_MODE_NO_KTLS_* modes which opted-out of KTLS with an opt-in SSL_OP_ENABLE_KTLS. Note that this means that KTLS is not enabled by default. Users can enable KTLS via a custom OpenSSL config file that enables the KTLS option.
Sponsored by: Netflix