#1072514 libgnutls30: Disabled KTLS support

Package:
src:libgnutls30
Source:
src:libgnutls30
Submitter:
Daniel Salzman
Date:
2025-03-29 09:57:02 UTC
Severity:
normal
Tags:
#1072514#5
Date:
2024-06-03 08:30:41 UTC
From:
To:
Dear Maintainer,

The GnuTLS library is built with KTLS support disabled. If the `--enable-ktls` configure option is added to CONFIGUREARGS
in debian/rules, the library builds successfully. Also, TLS offloading seems to work well.

Could you please enable this feature in the package?
#1072514#10
Date:
2024-09-19 09:58:49 UTC
From:
To:
I'm hopefully reassigning this to a correct package.

Also CC'ing maintainers for visibility because it's needed in Knot DNS
(knot package).


Cheers,
Jakub Ružička
#1072514#19
Date:
2025-01-06 06:54:38 UTC
From:
To:
Control: tags -1 moreinfo

Good morning

I get a testsuite error with --enable-ktls:
FAIL: ktls_keyupdate.sh

Afaiui GnuTLS/KTLS requires a kernel patch for key-update support to be
useful. Without it applications will get unexpected errors.

https://gitlab.com/gnutls/gnutls/-/issues/1420
https://gitlab.com/gnutls/gnutls/-/merge_requests/1625
https://fedoraproject.org/wiki/Changes/KTLSSupportForGnuTLS

cu Andreas
#1072514#26
Date:
2025-01-06 07:08:20 UTC
From:
To:
On 2025-01-06 Andreas Metzler <ametzler@bebt.de> wrote:
[...]

... after "sudo modprobe tls".
#1072514#31
Date:
2025-01-06 09:25:49 UTC
From:
To:
Thank you for the attempt,

Personally I could live without the kernel patch, but I understand it's not an optimal solution :-/

Regards,
Daniel
#1072514#36
Date:
2025-03-29 09:53:45 UTC
From:
To:
[...]

Hello Daniel,

the patch has been merged in linux 6.14 and GnuTLS support (in GIT) has
also improved. I will revisit this after trixie release.

cu Andreas