git: 671a35b176e4 - main - UPDATING: Add a note about OpenSSL defaulting KTLS to off.

John Baldwin jhb at FreeBSD.org
Tue Aug 17 21:50:11 UTC 2021


On 8/17/21 2:46 PM, John Baldwin wrote:
> The branch main has been updated by jhb:
> 
> URL: https://cgit.FreeBSD.org/src/commit/?id=671a35b176e4b3c445696a8b423db5f8de26c285
> 
> commit 671a35b176e4b3c445696a8b423db5f8de26c285
> Author:     John Baldwin <jhb at FreeBSD.org>
> AuthorDate: 2021-08-17 21:40:33 +0000
> Commit:     John Baldwin <jhb at FreeBSD.org>
> CommitDate: 2021-08-17 21:43:46 +0000
> 
>      UPDATING: Add a note about OpenSSL defaulting KTLS to off.
>      
>      Sponsored by:   Netflix
>      MFC after:      5 days
>      Differential Revision:  https://reviews.freebsd.org/D31444

The NFS TLS daemons have been patched to enable KTLS explicitly.  For
other applications, a config file that can be used with OPENSSL_CONF
to enable KTLS is below:

openssl_conf = openssl_init

[openssl_init]

ssl_conf = ssl_sect

[ssl_sect]

system_default = system_default_sect

[system_default_sect]

Options = KTLS

-- 
John Baldwin


More information about the dev-commits-src-all mailing list