hardenedbsd/HardenedBSD
1
0
Fork 0
mirror of https://git.hardenedbsd.org/hardenedbsd/HardenedBSD.git synced 2024-11-14 22:32:30 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

UPDATING: Add a note about OpenSSL defaulting KTLS to off.

Browse Source 
Sponsored by:	Netflix
MFC after:	5 days
Differential Revision:	https://reviews.freebsd.org/D31444
This commit is contained in:
John Baldwin 2021-08-17 14:40:33 -07:00
parent 6372fd253e
commit 671a35b176
1 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
UPDATING
View File

@ -27,6 +27,14 @@ NOTE TO PEOPLE WHO THINK THAT FreeBSD 14.x IS SLOW:
world, or to merely disable the most expensive debugging functionality
at runtime, run "ln -s 'abort:false,junk:false' /etc/malloc.conf".)
20210817:
As of commit 62ca9fc1ad56 OpenSSL no longer enables kernel TLS
by default. Users can enable kernel TLS via the "KTLS" SSL
option. This can be enabled globally by using a custom
OpenSSL config file via OPENSSL_CONF or via an
application-specific configuration option for applications
which permit setting SSL options via SSL_CONF_cmd(3).
20210811:
Commit 3ad1e1c1ce20 changed the internal KAPI between the NFS
modules. Therefore, all need to be rebuilt from sources.