Since 3.0.0 openSSL can use kTLS. Allow configuring it. With kTLS enabled the linux kernel can handle the TLS connection in kernel space and potentially offload to crypto/network hardware.
Signed-off-by: Steffen Trumtrar <[email protected]> --- rules/openssl.in | 6 ++++++ rules/openssl.make | 1 + 2 files changed, 7 insertions(+) diff --git a/rules/openssl.in b/rules/openssl.in index 629ee3057..4c00e1e05 100644 --- a/rules/openssl.in +++ b/rules/openssl.in @@ -35,4 +35,10 @@ config OPENSSL_CRYPTODEV help Enable the BSD cryptodev engine even if we are not using BSD. +config OPENSSL_KTLS + bool + prompt "enable OpenSSL kTLS support" + help + Whether to build OpenSSL with kTLS support. + endif diff --git a/rules/openssl.make b/rules/openssl.make index 6e7111c70..bc1322725 100644 --- a/rules/openssl.make +++ b/rules/openssl.make @@ -67,6 +67,7 @@ OPENSSL_CONF_OPT := \ --openssldir=/usr/lib/ssl \ shared \ $(call ptx/ifdef, PTXCONF_OPENSSL_CRYPTODEV, enable-devcryptoeng, no-devcryptoeng) \ + $(call ptx/ifdef, PTXCONF_OPENSSL_KTLS, enable-ktls, no-ktls) \ no-idea \ no-mdc2 \ no-rc5 \ -- 2.43.0
