Date: Sun, 14 Mar 2021 14:56:51 +0000 From: tech-lists <tech-lists@zyxst.net> To: freebsd-current@freebsd.org Subject: Re: Getting started with ktls Message-ID: <YE4kM3euujJw9saZ@ceres.zyxst.net> In-Reply-To: <YQXPR0101MB096899D3D2241D0D6D830227DD909@YQXPR0101MB0968.CANPRD01.PROD.OUTLOOK.COM> References: <CAOtMX2ggNtsEQz7TinyHciqsgzUSjcdvMDb1oORKHtMBnzTELw@mail.gmail.com> <20210311003136.GM56617@kduck.mit.edu> <CAOtMX2iKtBAQWRzY1K9twAFrtdH=S559J6Zd%2Bm5D-YHHPVYf7g@mail.gmail.com> <20210311031501.GP56617@kduck.mit.edu> <CAOtMX2hApCJuTe8OqEJmjrj9vffLB%2BM%2Bc5qR=iPrhRnbeZf=jQ@mail.gmail.com> <YQXPR0101MB096899D3D2241D0D6D830227DD909@YQXPR0101MB0968.CANPRD01.PROD.OUTLOOK.COM>
next in thread | previous in thread | raw e-mail | index | archive | help
--5AI3IKaAEoNqVsEu Content-Type: text/plain; charset=us-ascii; format=flowed Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Thu, Mar 11, 2021 at 03:42:55PM +0000, Rick Macklem wrote: >I'm going to cheat and top post (the discussion looks >pretty convoluted). > >- The kernel must be built with "options KERN_TLS" >- OpenSSL must be built with KTLS enabled >- These two sysctls need to be set to 1 > kern.ipc.tls.enable > kern.ipc.mb_use_ext_pgs Hello, I'd like to try ktls but have found the following: On AMD64 (stable/13) this option is present in the GENERIC kernel=20 of world built about a month ago: stable/13-n244496-618dee60231=20 and openssl version is 1.1.1i-freebsd On ARM64 (stable/13) it's *not* present in a world built earlier=20 today from stable/13-n244876-0b45290603b. Here, the openssl version=20 is 1.1.1j-freebsd On another ARM64 (main/14) it *is* present in main-n245445-07564e17620=20 built with sources from the 11th March. openssl is 1.1.1j-freebsd here=20 as well. I'd like to have it (ktls) available on the ARM64=20 stable/13-n244876-0b45290603b. Is it just a matter of adding the option,=20 and then the sysctls become available? Is it "better" with openssl[-devel]= =20 in ports or openssl in base? thanks, --=20 J. --5AI3IKaAEoNqVsEu Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEE8n3tWhxW11Ccvv9/s8o7QhFzNAUFAmBOJCoACgkQs8o7QhFz NAWiNQ//UoZ088MGtg4SJ1RinapFxDjwS8obJyketkmIO44CLn3clxJKpR+yna7F j4uzXc01fJBHJ1EJacqfQOxmB8TArvl70OJ8wK1aP9iOMKgymbVIxMXkMJS3d8Xj osrCvoOfT+5Mp1rlTRGtiA28Skm0Q+ZKvTVgcR5lmcUIkr7ib5SDjH/15EPvBpWJ ZXHcSmYRs8AllwaMq5AVA1aplGYYqSFI6qzVVtzPxALvG7qS/rTnqHWqgac//O1G zPzjlZwP3A86DHaZn+/rK5EhxkyxR5O89/RHHhvUg4HRFncsantqR1OTxxVkVHrt Qxn/szS31CujYuDODHMri24qZ1StxYZ/Vkqljo3bTDlROZwlrvFOqVTTDMdFfjM0 DnUmCSQSTPvLCco77ii21bMtrVbh2f49G+gSO8Mczy213q6RTBAqNPANffnOTNaM QxSfCNtzkXQAxlp1MpzL17IU5liYXXa3T1lfzGB65NkDHBjBZhLXM5MF8LeHGhKr OJzhN+U1QE89OdPQQ8GnA2uIdHjYzIWjEsG7KSGfSvRvt+pVrvabf7vWMenv+9Cd FXSNB7ZWccs0eVf1UG2wCWRxM8A7nj6ytkIRf69X0gB/VJIKdsx0ZuQk5hxHEcMK 7YIWlxB3tJANdL2SUAtmTsJM7DZ6FoJehhdEv5b7DDKh8eq1kNk= =pQGR -----END PGP SIGNATURE----- --5AI3IKaAEoNqVsEu--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?YE4kM3euujJw9saZ>