Date: Tue, 16 Mar 2021 17:53:50 +0000 From: tech-lists <tech-lists@zyxst.net> To: freebsd-current@freebsd.org Subject: Re: Getting started with ktls Message-ID: <YFDwrtagYb8xllVp@ceres.zyxst.net> In-Reply-To: <YQXPR0101MB0968DA8912890879ECB7C35BDD6D9@YQXPR0101MB0968.CANPRD01.PROD.OUTLOOK.COM> References: <CAOtMX2ggNtsEQz7TinyHciqsgzUSjcdvMDb1oORKHtMBnzTELw@mail.gmail.com> <20210311003136.GM56617@kduck.mit.edu> <CAOtMX2iKtBAQWRzY1K9twAFrtdH=S559J6Zd%2Bm5D-YHHPVYf7g@mail.gmail.com> <20210311031501.GP56617@kduck.mit.edu> <CAOtMX2hApCJuTe8OqEJmjrj9vffLB%2BM%2Bc5qR=iPrhRnbeZf=jQ@mail.gmail.com> <YQXPR0101MB096899D3D2241D0D6D830227DD909@YQXPR0101MB0968.CANPRD01.PROD.OUTLOOK.COM> <YE4kM3euujJw9saZ@ceres.zyxst.net> <CAOtMX2gNMw2%2BYcKT9cY35SqASmnvMMH9GDK66VjQvhA85Rj_kQ@mail.gmail.com> <YQXPR0101MB0968DA8912890879ECB7C35BDD6D9@YQXPR0101MB0968.CANPRD01.PROD.OUTLOOK.COM>
next in thread | previous in thread | raw e-mail | index | archive | help
[-- Attachment #1 --] On Sun, Mar 14, 2021 at 08:55:18PM +0000, Rick Macklem wrote: >Alan explains how to set it up, below. >However, I thought I'd note that maybe one person has tested KTLS >on arm64, so you should consider doing this for test purposes only. >If you do do some testing, please post with your results, >success or failure. > >>It's present in current kernels for both 13 and 14, amd64 and aarch64. >>However, it's not present in 13's openssl. To use it, you must either >>rebuild world with WITH_OPENSSL_KTLS=YES in /etc/src.conf, >Doing it this way means that everything linked to OpenSSL will use >it. Probably a better testsituation, but expect at least the apache >server to break. (Most breakage was fixed by a recent patch to the >serf library, but I think the apache server is still broken. OK, it's been built and all ports recompiled and reinstalled. Things that use openssl on this machine are mutt (imaps) lynx (https) and nginx (https) and py-certbot. They all seem to work. How would I test? thanks, -- J. [-- Attachment #2 --] -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEE8n3tWhxW11Ccvv9/s8o7QhFzNAUFAmBQ8KYACgkQs8o7QhFz NAXErA/+PSfOQAhUU1GQcY40gbQ2jdEB9oc3yOqEvO9mUwljDAtW5Dl0nj9yKfUu Pdy5iI3sG2RGADpE4ytviQS9ARaCeGiFt9T1ZWUm3u+80GyyApzP4T/KaJ1gBBvP 2mryrYrDc8+XDtvCyy+kayLCESXvTLQsYVQehSQBoj5njPjXmPCActTdCcoxVxaY p1B63OFRSF3uLVL3npww6IkuDndeTp72rm5SDTH23NzvPUefNizmInR1C7yT8VNJ tfZHFoFX6vM5iClv0anasyVjX8xz52iQUiFwQlFHc0qK6byJ6ndhGnFqMI3Hkv1k Gqf8DYMrVl5Icvuae76PGQTvGQl0lBxo48uMUsNvEm2FysNhB9SXdclFWuCHQtVC /aQIu7Io8NkWjegFw1GKj9jCudMx8WXlMPj/I3Gv4TkEjtls13zOlfqAgqPyVksH LOKm3XL+74PR5q2dPH5g8JU4htW8VKlT7yPQQuOB//kIU7QppxBLcHImdrwGbPDD 6KQRKFeHGlSTFgXHQe5ynYJvnqayxGBF2wOTgDTe0XBbFA/H307/bnf+9HVdINAU N46wVHwf7XDqlhljOEprtBedZoyBk0jJ9xf/pfg3gjjFanRrcfLEPTezl3F8UXtj HXKXIVFT+RMsttE00ESvtutvIU4Qnj30E6gM5y6DAEZ4x2aBx84= =2YbL -----END PGP SIGNATURE-----
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?YFDwrtagYb8xllVp>