Page MenuHomeFreeBSD

Fix downgrading of TOE TLS sockets to plain TOE.
ClosedPublic

Authored by jhb on Dec 3 2020, 9:31 PM.
Tags
None
Referenced Files
Unknown Object (File)
Tue, Apr 21, 4:50 AM
Unknown Object (File)
Mon, Apr 20, 7:23 AM
Unknown Object (File)
Sun, Apr 19, 6:13 AM
Unknown Object (File)
Tue, Apr 14, 6:37 AM
Unknown Object (File)
Tue, Apr 14, 6:29 AM
Unknown Object (File)
Mon, Apr 13, 11:36 PM
Unknown Object (File)
Sat, Apr 11, 11:15 PM
Unknown Object (File)
Sat, Apr 11, 10:16 AM
Subscribers

Details

Summary

If a TOE TLS socket ends up using an unsupported TLS version or
ciphersuite, it must be downgraded to a "plain" TOE socket with
TLS encryption/decryption performed on the host. The previous
implementation of this fallback was incomplete and resulted in
hung connections.

Diff Detail

Lint
Lint Passed
Unit
No Test Coverage
Build Status
Buildable 35176
Build 32126: arc lint + arc unit