D31445.diff
No OneTemporary
Actions

Size

1 KB

Referenced Files

None

Subscribers

None

D31445.diff
View Options

	diff --git a/usr.sbin/rpc.tlsclntd/rpc.tlsclntd.c b/usr.sbin/rpc.tlsclntd/rpc.tlsclntd.c
	--- a/usr.sbin/rpc.tlsclntd/rpc.tlsclntd.c
	+++ b/usr.sbin/rpc.tlsclntd/rpc.tlsclntd.c
	@@ -573,9 +573,14 @@
	SSL_OP_NO_TLSv1_1 \| SSL_OP_NO_TLSv1_2;
	#else
	flags = SSL_OP_NO_SSLv2 \| SSL_OP_NO_SSLv3 \| SSL_OP_NO_TLSv1_3;
	+#endif
	+#ifdef SSL_OP_ENABLE_KTLS
	+ flags \|= SSL_OP_ENABLE_KTLS;
	#endif
	SSL_CTX_set_options(ctx, flags);
	+#ifdef SSL_MODE_NO_KTLS_TX
	SSL_CTX_clear_mode(ctx, SSL_MODE_NO_KTLS_TX \| SSL_MODE_NO_KTLS_RX);
	+#endif
	return (ctx);
	}

	diff --git a/usr.sbin/rpc.tlsservd/rpc.tlsservd.c b/usr.sbin/rpc.tlsservd/rpc.tlsservd.c
	--- a/usr.sbin/rpc.tlsservd/rpc.tlsservd.c
	+++ b/usr.sbin/rpc.tlsservd/rpc.tlsservd.c
	@@ -636,7 +636,12 @@
	SSL_CTX_set_verify(ctx, SSL_VERIFY_PEER,
	rpctls_verify_callback);
	}
	+#ifdef SSL_OP_ENABLE_KTLS
	+ SSL_CTX_set_options(ctx, SSL_OP_ENABLE_KTLS);
	+#endif
	+#ifdef SSL_MODE_NO_KTLS_TX
	SSL_CTX_clear_mode(ctx, SSL_MODE_NO_KTLS_TX \| SSL_MODE_NO_KTLS_RX);
	+#endif
	return (ctx);
	}