v0.11

ktls-utils 0.11 - 2024-06-05

• Add support for chained certs
• Move to-do items to the GitHub issue tracker
• Fix minor bugs

v0.10

ktls-utils 0.10 - 2023-09-21

• Fix Server Name Indicator support (IP addresses)
• Add tlshd.conf option to provide specific trust chain
• Reorganize tlshd.conf
• Fix numerous bugs reported by packagers

v0.9

ktls-utils 0.9 - 2023-05-01

• Cipher negotiaion now conforms with distro security policies
• Improve Server Name Indicator support
• Disable Nagle during handshakes
• Send TLS Alerts on handshake errors

v0.8

ktls-utils 0.8 - 2023-04-05

• Replace the listen-based upcall mechanism with netlink
• Implement server-side handshake support
• Implement x.509 certificate verification
• Implement keyring-based exchange of authentication material

v0.7

ktls-utils 0.7 - 2022-11-10

• Remove the -n command line option
• Support client-side peer authentication
• Support upcall API changes in v6.0 prototype kernel
• Add /etc/tlshd.conf with support for default cert and private key

v0.6

ktls-utils 0.6 - 2022-05-27

• Update value of SOL_TLSH constant for kernel v5.18
• Fix gnutls_transport_is_ktls_enabled()
• Avoid zombie children
• Report peer certificate verification failures
• Split the debug command-line option

A pre-release version of ktls-utils 0.6 was exercised at the Spring 2022 NFS bake-a-thon, held April 25 - 29, 2022.

v0.5

ktls-utils 0.5 - 2022-04-11

• Fix retrieval of TLSH_PRIORITIES
• Refactor keyring code
• Sketch in x.509 client authentication support
• Re-license request from Oracle CorpArch
• Enable thorough static code checking
• Enable compilation with older versions of GnuTLS