Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 17 Aug 2021 14:50:10 -0700
From:      John Baldwin <jhb@FreeBSD.org>
To:        src-committers@FreeBSD.org, dev-commits-src-all@FreeBSD.org, dev-commits-src-main@FreeBSD.org
Subject:   Re: git: 671a35b176e4 - main - UPDATING: Add a note about OpenSSL defaulting KTLS to off.
Message-ID:  <d62f0dc7-b2c6-d18f-96ef-eba03923aa71@FreeBSD.org>
In-Reply-To: <202108172146.17HLk3aK017875@gitrepo.freebsd.org>
References:  <202108172146.17HLk3aK017875@gitrepo.freebsd.org>

next in thread | previous in thread | raw e-mail | index | archive | help
On 8/17/21 2:46 PM, John Baldwin wrote:
> The branch main has been updated by jhb:
> 
> URL: https://cgit.FreeBSD.org/src/commit/?id=671a35b176e4b3c445696a8b423db5f8de26c285
> 
> commit 671a35b176e4b3c445696a8b423db5f8de26c285
> Author:     John Baldwin <jhb@FreeBSD.org>
> AuthorDate: 2021-08-17 21:40:33 +0000
> Commit:     John Baldwin <jhb@FreeBSD.org>
> CommitDate: 2021-08-17 21:43:46 +0000
> 
>      UPDATING: Add a note about OpenSSL defaulting KTLS to off.
>      
>      Sponsored by:   Netflix
>      MFC after:      5 days
>      Differential Revision:  https://reviews.freebsd.org/D31444

The NFS TLS daemons have been patched to enable KTLS explicitly.  For
other applications, a config file that can be used with OPENSSL_CONF
to enable KTLS is below:

openssl_conf = openssl_init

[openssl_init]

ssl_conf = ssl_sect

[ssl_sect]

system_default = system_default_sect

[system_default_sect]

Options = KTLS

-- 
John Baldwin



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?d62f0dc7-b2c6-d18f-96ef-eba03923aa71>