Re: How to use ktls with openssl in base

From: Rick Macklem <rick.macklem_at_gmail.com>
Date: Fri, 12 Sep 2025 21:40:02 UTC
On Fri, Sep 12, 2025 at 2:24 PM Pete Wright <pete@nomadlogic.org> wrote:
>
>
>
> On 9/12/25 13:08, Pete French wrote:
> > Am running 14.3-STABLE form a few weeks ago, and I would rather like
> > to get KTLS working with the openssl in base. I have got it working
> > with GnuTLS form post easily enough (enable in the global config file
> > and it just works). But am having problems in base.
>  > > My understanding is that the openssl in base is compiled with ktls
> > support. For reading around, it seems I do need to enable it by
> > adding KTLS to the 'Options' directive in things like Apache,
> > but this doesn't seem to work.
>
> just checking dumb things, ktls(4) man page states "OpenSSL in the base
> system includes KTLS support when built with WITH_OPENSSL_KTLS."  I
> don't think that's a default knob?
For amd64 and aarch64 it should be. For other arches, it won't be.
(You can look in share/mk/src.opts.mk.)

rick

>
> -pete>
>
> --
> Pete Wright
> pete@nomadlogic.org
>
>