KTLS: enable the CCM mode of ktls
authorTianjia Zhang <tianjia.zhang@linux.alibaba.com>
Mon, 6 Dec 2021 09:50:50 +0000 (17:50 +0800)
committerTomas Mraz <tomas@openssl.org>
Wed, 16 Nov 2022 15:46:46 +0000 (16:46 +0100)
commit34c2f90d8ed325a892618ce0e42ebe916966d4d8
tree72c988d28110d7f5f075470e9d8ffca003eb7b48
parent3b6154ccaf3e64bcdfda4859f2b98ef21b08c5b2
KTLS: enable the CCM mode of ktls

The latest kernel (including stable kernel) has fixed the issue
of decryption failure in CCM mode in TLS 1.3. It is necessary to
reenable CCM mode for KTLS.

Signed-off-by: Tianjia Zhang <tianjia.zhang@linux.alibaba.com>
Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/17207)
CHANGES.md
ssl/record/methods/ktls_meth.c