Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 942003 - request for tlshd (e.g. via ktls-utils)
Summary: request for tlshd (e.g. via ktls-utils)
Status: UNCONFIRMED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: New packages (show other bugs)
Hardware: All Linux
: Normal normal
Assignee: Default Assignee for New Packages
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2024-10-23 09:34 UTC by simon
Modified: 2025-04-20 07:41 UTC (History)
3 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
ktls-utils git ebuild (ktls-utils-9999.ebuild,697 bytes, application/vnd.gentoo.ebuild)
2024-10-23 09:34 UTC, simon
Details
initd file corresponding to ebuild (tlshd.initd,718 bytes, text/plain)
2024-10-23 09:34 UTC, simon
Details
update ebuiild (ktls-utils-9999.ebuild,1.01 KB, application/vnd.gentoo.ebuild)
2024-11-05 15:22 UTC, simon
Details

Note You need to log in before you can comment on or make changes to this bug.
Description simon 2024-10-23 09:34:06 UTC
Created attachment 906597 [details]
ktls-utils git ebuild

In order to use kernel TLS handling e.g. for (m)TLS for NFS a user space utility for TLS handshake (and certificate handling) is needed.

I could not find one and drafted a git ebuild for 
https://github.com/oracle/ktls-utils/
This was mentioned on NFS wiki from Arch and seems to be used in their repo.

Got it running on my openrc system. Ebuild is missing handling of systemd/openrc variability and maybe more QA aspects.
Comment 1 simon 2024-10-23 09:34:44 UTC
Created attachment 906598 [details]
initd file corresponding to ebuild

openrc init file used for testing
Comment 2 simon 2024-10-23 09:43:32 UTC
Not sure if it should be seen as blocker for https://bugs.gentoo.org/909295
or just related (not sure if this link type exists)
Comment 3 simon 2024-11-05 15:22:49 UTC
Created attachment 907964 [details]
update ebuiild

corrected dependencies and added check for TLS kernel support
Comment 4 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2025-04-20 07:06:50 UTC
Hi Simon,

I can take a look at adding this -- could you please do the following two things if possible?

1) Provide me with your `Signed-off-by: name <email>`;
2) Give me some way to test it's really working? (ideally not NFS but I can do that if i have to)