]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
net/tls: reject offload of TLS 1.3
authorJakub Kicinski <jakub.kicinski@netronome.com>
Fri, 28 Jun 2019 23:07:59 +0000 (16:07 -0700)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Sun, 28 Jul 2019 06:27:19 +0000 (08:27 +0200)
commitac7f011be7cd1806c769db61dceed61f6ec86edc
tree918c46d3e10db680cd2a7f16208822a0587de19e
parentd8c8e194647f554f8f6377f7f9424542882676b0
net/tls: reject offload of TLS 1.3

[ Upstream commit 618bac45937a3dc6126ac0652747481e97000f99 ]

Neither drivers nor the tls offload code currently supports TLS
version 1.3. Check the TLS version when installing connection
state. TLS 1.3 will just fallback to the kernel crypto for now.

Fixes: 130b392c6cd6 ("net: tls: Add tls 1.3 support")
Signed-off-by: Jakub Kicinski <jakub.kicinski@netronome.com>
Reviewed-by: Dirk van der Merwe <dirk.vandermerwe@netronome.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
net/tls/tls_device.c