aboutsummaryrefslogtreecommitdiff
path: root/UPDATING
diff options
context:
space:
mode:
authorJohn Baldwin <jhb@FreeBSD.org>2021-08-17 21:40:33 +0000
committerJohn Baldwin <jhb@FreeBSD.org>2021-08-17 21:43:46 +0000
commit671a35b176e4b3c445696a8b423db5f8de26c285 (patch)
tree9554403f656ae0cd1eba5951f51e566f23869fd4 /UPDATING
parent6372fd253e3266c6eb271f49159f1632d527c9bd (diff)
downloadsrc-671a35b176e4b3c445696a8b423db5f8de26c285.tar.gz
src-671a35b176e4b3c445696a8b423db5f8de26c285.zip
UPDATING: Add a note about OpenSSL defaulting KTLS to off.
Sponsored by: Netflix MFC after: 5 days Differential Revision: https://reviews.freebsd.org/D31444
Diffstat (limited to 'UPDATING')
-rw-r--r--UPDATING8
1 files changed, 8 insertions, 0 deletions
diff --git a/UPDATING b/UPDATING
index 512f33e9b43d..7293a336c99c 100644
--- a/UPDATING
+++ b/UPDATING
@@ -27,6 +27,14 @@ NOTE TO PEOPLE WHO THINK THAT FreeBSD 14.x IS SLOW:
world, or to merely disable the most expensive debugging functionality
at runtime, run "ln -s 'abort:false,junk:false' /etc/malloc.conf".)
+20210817:
+ As of commit 62ca9fc1ad56 OpenSSL no longer enables kernel TLS
+ by default. Users can enable kernel TLS via the "KTLS" SSL
+ option. This can be enabled globally by using a custom
+ OpenSSL config file via OPENSSL_CONF or via an
+ application-specific configuration option for applications
+ which permit setting SSL options via SSL_CONF_cmd(3).
+
20210811:
Commit 3ad1e1c1ce20 changed the internal KAPI between the NFS
modules. Therefore, all need to be rebuilt from sources.