diff options
| author | John Baldwin <jhb@FreeBSD.org> | 2019-12-04 16:50:06 -0800 |
|---|---|---|
| committer | Matt Caswell <matt@openssl.org> | 2020-08-31 09:34:19 +0100 |
| commit | b22a3ccc07e304df8fdbc79bf4168c1a880d0ac5 (patch) | |
| tree | 23b706a8da448ae8ae1d082c50b4ca7b57ae487a /include/internal/ktls.h | |
| parent | 3c1641e8e86dc86028637251421a57827243f6ca (diff) | |
Support for KTLS TX on FreeBSD for TLS 1.3.
Reviewed-by: Tomas Mraz <tmraz@fedoraproject.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/12111)
Diffstat (limited to 'include/internal/ktls.h')
| -rw-r--r-- | include/internal/ktls.h | 7 |
1 files changed, 6 insertions, 1 deletions
diff --git a/include/internal/ktls.h b/include/internal/ktls.h index fe02a35536..b681278c34 100644 --- a/include/internal/ktls.h +++ b/include/internal/ktls.h @@ -38,6 +38,7 @@ # endif # define OPENSSL_KTLS_AES_GCM_128 # define OPENSSL_KTLS_AES_GCM_256 +# define OPENSSL_KTLS_TLS13 /* * Only used by the tests in sslapitest.c. @@ -221,6 +222,7 @@ static ossl_inline int ktls_check_supported_cipher(const SSL *s, case TLS1_VERSION: case TLS1_1_VERSION: case TLS1_2_VERSION: + case TLS1_3_VERSION: break; default: return 0; @@ -263,7 +265,10 @@ static ossl_inline int ktls_configure_crypto(const SSL *s, const EVP_CIPHER *c, case SSL_AES128GCM: case SSL_AES256GCM: crypto_info->cipher_algorithm = CRYPTO_AES_NIST_GCM_16; - crypto_info->iv_len = EVP_GCM_TLS_FIXED_IV_LEN; + if (s->version == TLS1_3_VERSION) + crypto_info->iv_len = EVP_CIPHER_CTX_iv_length(dd); + else + crypto_info->iv_len = EVP_GCM_TLS_FIXED_IV_LEN; break; case SSL_AES128: case SSL_AES256: |