nfs tls: Update for SSL_OP_ENABLE_KTLS.
ClosedPublic
Actions

Authored by jhb on Aug 6 2021, 11:39 PM.

Details

Reviewers

Commits

rGdf8406ca0f05: nfs tls: Update for SSL_OP_ENABLE_KTLS.
rGc7bb0f47f721: nfs tls: Update for SSL_OP_ENABLE_KTLS.

Summary

Upstream OpenSSL (and the KTLS backport) have switched to an opt-in
option (SSL_OP_ENABLE_KTLS) in place of opt-out modes
(SSL_MODE_NO_KTLS_TX and SSL_MODE_NO_KTLS_RX) for controlling kernel
TLS.

Diff Detail

Repository

rG FreeBSD src repository

Lint

Lint Not Applicable

Unit

Tests Not Applicable

Event Timeline

jhb created this revision.Aug 6 2021, 11:39 PM

Herald added a subscriber: imp. · View Herald TranscriptAug 6 2021, 11:39 PM

jhb requested review of this revision.Aug 6 2021, 11:39 PM

Harbormaster completed remote builds in B40911: Diff 93357.Aug 6 2021, 11:39 PM

I have only tested that this compiles ok in a branch where OpenSSL has been updated. I have not run tested it. The full branch is available at https://github.com/bsdjhb/freebsd/tree/openssl_get_ktls

Built and tested ok with an old OpenSSL.
Looks fine to me, rick.

This revision is now accepted and ready to land.Aug 7 2021, 2:01 AM

Closed by commit rGc7bb0f47f721: nfs tls: Update for SSL_OP_ENABLE_KTLS. (authored by jhb). · Explain WhyAug 10 2021, 9:20 PM

This revision was automatically updated to reflect the committed changes.

jhb added a commit: rGc7bb0f47f721: nfs tls: Update for SSL_OP_ENABLE_KTLS..

jhb added a commit: rGdf8406ca0f05: nfs tls: Update for SSL_OP_ENABLE_KTLS..Aug 24 2021, 1:01 AM