Issues

• Should failure to set TLS_TX_MAX_PAYLOAD_LEN be fatal on older kernels?

  linux-nfs/ktls-utils#63 · Filter by author vishalp opened on Oct 23, 2026

• TLS 1.3 KeyUpdate: should kTLS handle it instead of the tlshd upcall?

  linux-nfs/ktls-utils#56 · Filter by author chucklever opened on Sep 23, 2026
  9

• Assess tlshd support for Merkle Tree Certificates (post-quantum)

  linux-nfs/ktls-utils#53 · Filter by author chucklever opened on Sep 23, 2026

• Server-side keyring certificates: kernel never populates ta_my_cert / ta_my_privkey

  enhancement
  linux-nfs/ktls-utils#52 · Filter by author chucklever opened on Sep 23, 2026

• Dual certificate support does not cover keyring-provided client certificates

  enhancement
  linux-nfs/ktls-utils#51 · Filter by author chucklever opened on Sep 23, 2026

• Privilege dropping

  linux-nfs/ktls-utils#48 · Filter by author chucklever opened on Sep 23, 2026
  4

• Allowed permissions should not be so restrictive

  linux-nfs/ktls-utils#47 · Filter by author chucklever opened on Sep 23, 2026
  5

• QUIC timeout handling is not thread-safe

  linux-nfs/ktls-utils#42 · Filter by author chucklever opened on Sep 23, 2026
  1

• QUIC anti-replay is faked and insecure

  linux-nfs/ktls-utils#41 · Filter by author chucklever opened on Sep 23, 2026
  2

• SSL 0.128 Unknown Packet packet received

  linux-nfs/ktls-utils#36 · Filter by author chucklever opened on Sep 23, 2026

• Developer documentation for the kernel handshake API

  documentationenhancement
  linux-nfs/ktls-utils#30 · Filter by author chucklever opened on Sep 23, 2026

• Kernel crash at __sys_recvfrom() on NVMe TLS connections during port toggles

  bug
  linux-nfs/ktls-utils#28 · Filter by author chucklever opened on Sep 23, 2026
  7

• Have systemd populate keyrings at boot from UEFI-stored material

  enhancement
  linux-nfs/ktls-utils#25 · Filter by author chucklever opened on Sep 23, 2026

• Add an option to disable server certificate validation on the client

  enhancement
  linux-nfs/ktls-utils#24 · Filter by author chucklever opened on Sep 23, 2026
  2

• Handle FreeBSD-style user-specific certificates for NFS

  enhancement
  linux-nfs/ktls-utils#18 · Filter by author chucklever opened on Sep 23, 2026
  11

• root device / filesystem with TLS protection

  enhancement
  linux-nfs/ktls-utils#14 · Filter by author chucklever opened on Sep 23, 2026

• Multiple trust chains for server verification

  enhancement
  linux-nfs/ktls-utils#13 · Filter by author chucklever opened on Sep 23, 2026

• Infrastructure for one TLS session across multiple sockets

  enhancement
  linux-nfs/ktls-utils#12 · Filter by author chucklever opened on Sep 23, 2026

• tlshd / netlink needs to support DTLS

  enhancement
  linux-nfs/ktls-utils#11 · Filter by author chucklever opened on Sep 23, 2026

• tlshd should check the ALPN and extended key usage

  enhancement
  linux-nfs/ktls-utils#10 · Filter by author chucklever opened on Sep 23, 2026

• Support for accessing material stored in a local TPM

  enhancement
  linux-nfs/ktls-utils#9 · Filter by author chucklever opened on Sep 23, 2026

• TLS session key re-negotiation

  enhancement
  linux-nfs/ktls-utils#8 · Filter by author chucklever opened on Sep 23, 2026
  2

• Support for restricting client certificates trusted by server

  enhancement
  linux-nfs/ktls-utils#6 · Filter by author chucklever opened on Sep 23, 2026
  17