ktls-utils 1.1.0 2025-06-02

 * Return to the old release process
 * Update the contribution process
 * Accept alternate keyrings during handshake upcall
 * Initial support for building ktls-utils with MUSL

Release ktls-utils 1.0

Signed-off-by: Chuck Lever <[email protected]>

Release ktls-utils 1.0-rc2

Signed-off-by: Chuck Lever <[email protected]>

Release ktls-utils 1.0-rc1

Signed-off-by: Chuck Lever <[email protected]>

ktls-utils 0.11 - 2024-06-05

 * Add support for chained certs
 * Move to-do items to the GitHub issue tracker
 * Fix minor bugs

ktls-utils 0.10 - 2023-09-21

 * Fix Server Name Indicator support (IP addresses)
 * Add tlshd.conf option to provide specific trust chain
 * Reorganize tlshd.conf
 * Fix numerous bugs reported by packagers

ktls-utils 0.9 - 2023-05-01

 * Cipher negotiaion now conforms with distro security policies
 * Improve Server Name Indicator support
 * Disable Nagle during handshakes
 * Send TLS Alerts on handshake errors

ktls-utils 0.8 - 2023-04-05

 * Replace the listen-based upcall mechanism with netlink
 * Implement server-side handshake support
 * Implement x.509 certificate verification
 * Implement keyring-based exchange of authentication material

ktls-utils 0.7 - 2022-11-10

 * Remove the -n command line option
 * Support client-side peer authentication
 * Support upcall API changes in v6.0 prototype kernel
 * Add /etc/tlshd.conf with support for default cert and private key

ktls-utils 0.6 - 2022-05-27

 * Update value of SOL_TLSH constant for kernel v5.18
 * Fix gnutls_transport_is_ktls_enabled()
 * Avoid zombie children
 * Report peer certificate verification failures
 * Split the debug command-line option

A pre-release version of ktls-utils 0.6 was exercised at the
Spring 2022 NFS bake-a-thon, held April 25 - 29, 2022.