Page MenuHomeFreeBSD

security/openssl: Update KTLS patches for Chacha20-Poly1305.
ClosedPublic

Authored by jhb on Aug 5 2021, 11:26 PM.
Tags
None
Referenced Files
F110010388: D31430.diff
Wed, Feb 12, 10:51 AM
Unknown Object (File)
Jan 5 2025, 3:08 PM
Unknown Object (File)
Jan 3 2025, 4:32 PM
Unknown Object (File)
Dec 30 2024, 6:07 PM
Unknown Object (File)
Dec 29 2024, 3:56 PM
Unknown Object (File)
Dec 28 2024, 3:37 PM
Unknown Object (File)
Dec 27 2024, 9:01 AM
Unknown Object (File)
Dec 7 2024, 3:53 AM
Subscribers

Details

Summary

This pulls in several upstream KTLS patches from OpenSSL master:

  • A fix to the return values of BIO_get_ktls_*().
  • Support for Chacha20-Poly1305.
  • Replacing the SSL_MODE_NO_KTLS_* modes which opted-out of KTLS with an opt-in SSL_OP_ENABLE_KTLS. Note that this means that KTLS is not enabled by default. Users can enable KTLS via a custom OpenSSL config file that enables the KTLS option.

Sponsored by: Netflix

Diff Detail

Repository
rP FreeBSD ports repository
Lint
No Lint Coverage
Unit
No Test Coverage
Build Status
Buildable 40882
Build 37771: arc lint + arc unit

Event Timeline

jhb requested review of this revision.Aug 5 2021, 11:26 PM

Ping. I have merged all these patches into base OpenSSL.

This revision was not accepted when it landed; it landed in state Needs Review.Aug 19 2021, 2:05 PM
This revision was automatically updated to reflect the committed changes.

Thanks!

Builds OK, committed