HomeFreeBSD

rpc.tlsclntd: Add an option to force use of TLS version 1.2

Description

rpc.tlsclntd: Add an option to force use of TLS version 1.2

Commit 0b4f2ab0e913 fixes the krpc so that it can use TLS
version 1.3 for NFS-over-TLS, as required by
the draft (someday to be an RFC).
Since FreeBSD 13.0, 13.1 use TLS version 1.2 for
NFS-over-TLS mounts, this command line option
may be used so that NFS-over-TLS mounts to 13.0, 13.1
servers will still work.

Without the command line option, NFS-over-TLS mounts
will use TLS version 1.3.

The man page update will be a separate commit.

(cherry picked from commit 72bf76d6b8c9e9de81661b68389e0035805b8606)

Details

Provenance
rmacklemAuthored on May 20 2022, 9:57 PM
Parents
rG81b2ab51138d: rpc.tlsservd: Add an option to allow TLS version 1.2
Branches
Unknown
Tags
Unknown