From 7c78932b9a4330fb7c8db72b3fb37cbff1401f8b Mon Sep 17 00:00:00 2001 From: Daiki Ueno Date: Sun, 10 Oct 2021 09:14:06 +0200 Subject: KTLS: Enable KTLS for receiving as well in TLS 1.3 This removes a guard condition that prevents KTLS being enabled for receiving in TLS 1.3. Use the correct sequence number and BIO for receive vs transmit offload. Co-authored-by: John Baldwin Signed-off-by: Daiki Ueno Reviewed-by: Matt Caswell Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/17942) --- CHANGES.md | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'CHANGES.md') diff --git a/CHANGES.md b/CHANGES.md index d82d857782..6ef8e7c5c8 100644 --- a/CHANGES.md +++ b/CHANGES.md @@ -24,6 +24,10 @@ OpenSSL 3.1 ### Changes between 3.0 and 3.1 [xx XXX xxxx] + * Extended Kernel TLS (KTLS) to support TLS 1.3 receive offload. + + *Daiki Ueno, John Baldwin and Dmitry Podgorny* + * Add support for TCP Fast Open (RFC7413) to macOS, Linux, and FreeBSD where supported and enabled. -- cgit v1.2.3