Created attachment 906597 [details] ktls-utils git ebuild In order to use kernel TLS handling e.g. for (m)TLS for NFS a user space utility for TLS handshake (and certificate handling) is needed. I could not find one and drafted a git ebuild for https://github.com/oracle/ktls-utils/ This was mentioned on NFS wiki from Arch and seems to be used in their repo. Got it running on my openrc system. Ebuild is missing handling of systemd/openrc variability and maybe more QA aspects.
Created attachment 906598 [details] initd file corresponding to ebuild openrc init file used for testing
Not sure if it should be seen as blocker for https://bugs.gentoo.org/909295 or just related (not sure if this link type exists)
Created attachment 907964 [details] update ebuiild corrected dependencies and added check for TLS kernel support
Hi Simon, I can take a look at adding this -- could you please do the following two things if possible? 1) Provide me with your `Signed-off-by: name <email>`; 2) Give me some way to test it's really working? (ideally not NFS but I can do that if i have to)