diff options
author | John Baldwin <jhb@FreeBSD.org> | 2021-08-17 21:40:33 +0000 |
---|---|---|
committer | John Baldwin <jhb@FreeBSD.org> | 2021-08-17 21:43:46 +0000 |
commit | 671a35b176e4b3c445696a8b423db5f8de26c285 (patch) | |
tree | 9554403f656ae0cd1eba5951f51e566f23869fd4 | |
parent | 6372fd253e3266c6eb271f49159f1632d527c9bd (diff) | |
download | src-671a35b176e4b3c445696a8b423db5f8de26c285.tar.gz src-671a35b176e4b3c445696a8b423db5f8de26c285.zip |
UPDATING: Add a note about OpenSSL defaulting KTLS to off.
Sponsored by: Netflix
MFC after: 5 days
Differential Revision: https://reviews.freebsd.org/D31444
-rw-r--r-- | UPDATING | 8 |
1 files changed, 8 insertions, 0 deletions
@@ -27,6 +27,14 @@ NOTE TO PEOPLE WHO THINK THAT FreeBSD 14.x IS SLOW: world, or to merely disable the most expensive debugging functionality at runtime, run "ln -s 'abort:false,junk:false' /etc/malloc.conf".) +20210817: + As of commit 62ca9fc1ad56 OpenSSL no longer enables kernel TLS + by default. Users can enable kernel TLS via the "KTLS" SSL + option. This can be enabled globally by using a custom + OpenSSL config file via OPENSSL_CONF or via an + application-specific configuration option for applications + which permit setting SSL options via SSL_CONF_cmd(3). + 20210811: Commit 3ad1e1c1ce20 changed the internal KAPI between the NFS modules. Therefore, all need to be rebuilt from sources. |