]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
net/tls: reject offload of TLS 1.3
authorJakub Kicinski <jakub.kicinski@netronome.com>
Fri, 28 Jun 2019 23:07:59 +0000 (16:07 -0700)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Sun, 28 Jul 2019 06:28:35 +0000 (08:28 +0200)
commit06ff90ba3c8c4ddd4d411ce5bea3a0fe3a34e0a3
treebd11fdcd1161bc2a9958c3ba7b5a3fefe8ecd3c4
parent53911428585db5042649fc568b2e12facc55d184
net/tls: reject offload of TLS 1.3

[ Upstream commit 618bac45937a3dc6126ac0652747481e97000f99 ]

Neither drivers nor the tls offload code currently supports TLS
version 1.3. Check the TLS version when installing connection
state. TLS 1.3 will just fallback to the kernel crypto for now.

Fixes: 130b392c6cd6 ("net: tls: Add tls 1.3 support")
Signed-off-by: Jakub Kicinski <jakub.kicinski@netronome.com>
Reviewed-by: Dirk van der Merwe <dirk.vandermerwe@netronome.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
net/tls/tls_device.c