Add support for in-kernel TLS (KTLS) on FreeBSD.
authorAndrew Gallatin <gallatin@gmail.com>
Mon, 22 Oct 2018 15:02:19 +0000 (11:02 -0400)
committerMatt Caswell <matt@openssl.org>
Thu, 31 Oct 2019 10:24:32 +0000 (10:24 +0000)
commit2111f5c2834a838c4fc1ca981fddf80cbc589dfc
treef818b3f6a402ec5948107eea9ce7a691db00789f
parent181ea366f67f46cab093d6a7bbb1b2f35125b9f2
Add support for in-kernel TLS (KTLS) on FreeBSD.

- Check for the <sys/ktls.h> header to determine if KTLS support
  is available.
- Populate a tls_enable structure with session key material for
  supported algorithms.  At present, AES-GCM128/256 and AES-CBC128/256
  with SHA1 and SHA2-256 HMACs are supported.  For AES-CBC, only MtE
  is supported.

Reviewed-by: Tomas Mraz <tmraz@fedoraproject.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/10045)
Configure
crypto/bio/bss_sock.c
include/internal/ktls.h
ssl/t1_enc.c