Bug 296498 - ktls broken in 15.0-RELEASE-p10
Summary: ktls broken in 15.0-RELEASE-p10
Status: Open
Alias: None
Product: Base System
Classification: Unclassified
Component: kern (show other bugs)
Version: Unspecified
Hardware: Any Any
: --- Affects Only Me
Assignee: freebsd-bugs (Nobody)
URL:
Keywords: regression
Depends on:
Blocks:
 
Reported: 2026-07-03 14:35 UTC by Patrick Mackinlay
Modified: 2026-07-03 20:50 UTC (History)
3 users (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Patrick Mackinlay 2026-07-03 14:35:09 UTC 
I recently upgraded from  15.0-RELEASE-p9 to 15.0-RELEASE-p10 and a ktls test I have running as part of a software build for several years stopped working. This test simply creates a local TLS connection and sends some data to and from the peers. The test uses openssl (base) with  SSL_OP_ENABLE_KTLS such that ktls is used if enabled (which it has been for several years).

Since the kernel upgrade I get a EBADMSG error in the server when reading the initial data sent from the client.

Note that if I dont set SSL_OP_ENABLE_KTLS on either end of the connection the test works fine. It also works fine for kern.ipc.tls.enable=0
Comment 1 Patrick Mackinlay 2026-07-03 17:55:37 UTC 
The was broken in commit
https://cgit.freebsd.org/src/commit/?id=540a315cdb46d6aa3cdbb3797710db652b3c4f4a
Comment 2 Mark Linimon freebsd_committer freebsd_triage 2026-07-03 18:39:38 UTC 
^Triage: Cc: committer in question.
Comment 3 Mark Johnston freebsd_committer freebsd_triage 2026-07-03 20:03:43 UTC 
Are you able to test patches?  If so, does this fix the problem? https://reviews.freebsd.org/D57557
Comment 4 Patrick Mackinlay 2026-07-03 20:50:28 UTC 
(In reply to Mark Johnston from comment #3)

Yes! This does fix it, I applied it directly to the tree at the broken commit (since I had that built)