Tags

Release ktls-utils (1.2.1-3)

Release ktls-utils (1.2.1-2)

Release ktls-utils (1.2.1-1)

ktls-utils 1.2.1 2025-07-18

ktls-utils 1.2.0 2025-07-11
 * Implement Certificate Revocation Lists
 * Add a default keyring for NFS consumers
 * Improvements to error reporting and logging
 * Manage per-session resources more effectively

Release ktls-utils (1.1.0-1)

ktls-utils 1.1.0 2025-06-02
 * Return to the old release process
 * Update the contribution process
 * Accept alternate keyrings during handshake upcall
 * Initial support for building ktls-utils with MUSL

Release ktls-utils (1.0.0-1)

Release ktls-utils (0.11-1).

Release ktls-utils (0.10-1).

Release ktls-utils (0.9-3).

ktls-utils 0.10 - 2023-09-21
 * Fix Server Name Indicator support (IP addresses)
 * Add tlshd.conf option to provide specific trust chain
 * Reorganize tlshd.conf
 * Fix numerous bugs reported by packagers

Release ktls-utils (0.9-2).

Release ktls-utils (0.9-1).

ktls-utils 0.9 - 2023-05-01
 * Cipher negotiaion now conforms with distro security policies
 * Improve Server Name Indicator support
 * Disable Nagle during handshakes
 * Send TLS Alerts on handshake errors

ktls-utils 0.8 - 2023-04-05
 * Replace the listen-based upcall mechanism with netlink
 * Implement server-side handshake support
 * Implement x.509 certificate verification
 * Implement keyring-based exchange of authentication material

ktls-utils 0.7 - 2022-11-10
 * Remove the -n command line option
 * Support client-side peer authentication
 * Support upcall API changes in v6.0 prototype kernel
 * Add /etc/tlshd.conf with support for default cert and private key

ktls-utils 0.6 - 2022-05-27
 * Update value of SOL_TLSH constant for kernel v5.18
 * Fix gnutls_transport_is_ktls_enabled()
 * Avoid zombie children
 * Report peer certificate verification failures
 * Split the debug command-line option

A pre-release version of ktls-utils 0.6 was exercised at the
Spring 2022 NFS bake-a-thon, held April 25 - 29, 2022.

ktls-utils 0.5 - 2022-04-11
 * Fix retrieval of TLSH_PRIORITIES
 * Refactor keyring code
 * Sketch in x.509 client authentication support
 * Re-license request from Oracle CorpArch
 * Enable thorough static code checking
 * Enable compilation with older versions of GnuTLS