Date: Tue, 16 Mar 2021 17:53:50 +0000 From: tech-lists <tech-lists@zyxst.net> To: freebsd-current@freebsd.org Subject: Re: Getting started with ktls Message-ID: <YFDwrtagYb8xllVp@ceres.zyxst.net> In-Reply-To: <YQXPR0101MB0968DA8912890879ECB7C35BDD6D9@YQXPR0101MB0968.CANPRD01.PROD.OUTLOOK.COM> References: <CAOtMX2ggNtsEQz7TinyHciqsgzUSjcdvMDb1oORKHtMBnzTELw@mail.gmail.com> <20210311003136.GM56617@kduck.mit.edu> <CAOtMX2iKtBAQWRzY1K9twAFrtdH=S559J6Zd%2Bm5D-YHHPVYf7g@mail.gmail.com> <20210311031501.GP56617@kduck.mit.edu> <CAOtMX2hApCJuTe8OqEJmjrj9vffLB%2BM%2Bc5qR=iPrhRnbeZf=jQ@mail.gmail.com> <YQXPR0101MB096899D3D2241D0D6D830227DD909@YQXPR0101MB0968.CANPRD01.PROD.OUTLOOK.COM> <YE4kM3euujJw9saZ@ceres.zyxst.net> <CAOtMX2gNMw2%2BYcKT9cY35SqASmnvMMH9GDK66VjQvhA85Rj_kQ@mail.gmail.com> <YQXPR0101MB0968DA8912890879ECB7C35BDD6D9@YQXPR0101MB0968.CANPRD01.PROD.OUTLOOK.COM>
next in thread | previous in thread | raw e-mail | index | archive | help
--qCT5JlyWsInhUH20 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Sun, Mar 14, 2021 at 08:55:18PM +0000, Rick Macklem wrote: >Alan explains how to set it up, below. >However, I thought I'd note that maybe one person has tested KTLS >on arm64, so you should consider doing this for test purposes only. >If you do do some testing, please post with your results, >success or failure. > >>It's present in current kernels for both 13 and 14, amd64 and aarch64. >>However, it's not present in 13's openssl. To use it, you must either >>rebuild world with WITH_OPENSSL_KTLS=3DYES in /etc/src.conf, >Doing it this way means that everything linked to OpenSSL will use >it. Probably a better testsituation, but expect at least the apache >server to break. (Most breakage was fixed by a recent patch to the >serf library, but I think the apache server is still broken. OK, it's been built and all ports recompiled and reinstalled. Things=20 that use openssl on this machine are mutt (imaps) lynx (https) and=20 nginx (https) and py-certbot. They all seem to work. How would I test? thanks, --=20 J. --qCT5JlyWsInhUH20 Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEE8n3tWhxW11Ccvv9/s8o7QhFzNAUFAmBQ8KYACgkQs8o7QhFz NAXErA/+PSfOQAhUU1GQcY40gbQ2jdEB9oc3yOqEvO9mUwljDAtW5Dl0nj9yKfUu Pdy5iI3sG2RGADpE4ytviQS9ARaCeGiFt9T1ZWUm3u+80GyyApzP4T/KaJ1gBBvP 2mryrYrDc8+XDtvCyy+kayLCESXvTLQsYVQehSQBoj5njPjXmPCActTdCcoxVxaY p1B63OFRSF3uLVL3npww6IkuDndeTp72rm5SDTH23NzvPUefNizmInR1C7yT8VNJ tfZHFoFX6vM5iClv0anasyVjX8xz52iQUiFwQlFHc0qK6byJ6ndhGnFqMI3Hkv1k Gqf8DYMrVl5Icvuae76PGQTvGQl0lBxo48uMUsNvEm2FysNhB9SXdclFWuCHQtVC /aQIu7Io8NkWjegFw1GKj9jCudMx8WXlMPj/I3Gv4TkEjtls13zOlfqAgqPyVksH LOKm3XL+74PR5q2dPH5g8JU4htW8VKlT7yPQQuOB//kIU7QppxBLcHImdrwGbPDD 6KQRKFeHGlSTFgXHQe5ynYJvnqayxGBF2wOTgDTe0XBbFA/H307/bnf+9HVdINAU N46wVHwf7XDqlhljOEprtBedZoyBk0jJ9xf/pfg3gjjFanRrcfLEPTezl3F8UXtj HXKXIVFT+RMsttE00ESvtutvIU4Qnj30E6gM5y6DAEZ4x2aBx84= =2YbL -----END PGP SIGNATURE----- --qCT5JlyWsInhUH20--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?YFDwrtagYb8xllVp>