Issues

• tlshd/tags.c: printf format mismatch (%u with signed int)

  oracle/ktls-utils#166 · Filter by author warter666 opened on Sep 18, 2026
  1

• tlshd/quic.c: quic_session_set_alpns() has no bound check on the ALPN count

  oracle/ktls-utils#165 · Filter by author warter666 opened on Sep 18, 2026
  1

• tlshd/quic.c: strtok() is not thread-safe; consider strtok_r()

  oracle/ktls-utils#164 · Filter by author warter666 opened on Sep 18, 2026
  1

• TLS 1.3 KeyUpdate: should kTLS handle it instead of the tlshd upcall?

  oracle/ktls-utils#161 · Filter by author martin-belanger opened on Aug 23, 2026
  9

• Assess tlshd support for Merkle Tree Certificates (post-quantum)

  oracle/ktls-utils#153 · Filter by author chucklever opened on Jun 11, 2026

• Server-side keyring certificates: kernel never populates ta_my_cert / ta_my_privkey

  enhancement
  oracle/ktls-utils#152 · Filter by author chucklever opened on Jun 11, 2026

• Dual certificate support does not cover keyring-provided client certificates

  enhancement
  oracle/ktls-utils#151 · Filter by author chucklever opened on Jun 11, 2026

• Privilege dropping

  oracle/ktls-utils#136 · Filter by author tomfitzhenry opened on Jan 13, 2026
  4

• Allowed permissions should not be so restrictive

  oracle/ktls-utils#115 · Filter by author Ypnose opened on Aug 4, 2025
  5

• QUIC timeout handling is not thread-safe

  oracle/ktls-utils#100 · Filter by author benh-debian opened on May 19, 2025
  1

• QUIC anti-replay is faked and insecure

  oracle/ktls-utils#99 · Filter by author benh-debian opened on May 19, 2025
  2

• SSL 0.128 Unknown Packet packet received

  oracle/ktls-utils#89 · Filter by author alistair23 opened on Apr 11, 2025

• Developer documentation for the kernel handshake API

  documentationenhancement
  oracle/ktls-utils#73 · Filter by author chucklever opened on Jul 19, 2024

• Kernel crash at __sys_recvfrom() on NVMe TLS connections during port toggles

  bug
  oracle/ktls-utils#71 · Filter by author hreinecke opened on Jul 18, 2024
  7

• Have systemd populate keyrings at boot from UEFI-stored material

  enhancement
  oracle/ktls-utils#58 · Filter by author chucklever opened on May 30, 2024

• Add an option to disable server certificate validation on the client

  enhancement
  oracle/ktls-utils#55 · Filter by author chucklever opened on Apr 29, 2024
  2

• Handle FreeBSD-style user-specific certificates for NFS

  enhancement
  oracle/ktls-utils#43 · Filter by author chucklever opened on Nov 4, 2023
  11

• root device / filesystem with TLS protection

  enhancement
  oracle/ktls-utils#35 · Filter by author chucklever opened on Sep 27, 2023

• Multiple trust chains for server verification

  enhancement
  oracle/ktls-utils#34 · Filter by author chucklever opened on Sep 27, 2023

• Infrastructure for one TLS session across multiple sockets

  enhancement
  oracle/ktls-utils#33 · Filter by author chucklever opened on Sep 27, 2023

• tlshd / netlink needs to support DTLS

  enhancement
  oracle/ktls-utils#32 · Filter by author chucklever opened on Sep 27, 2023

• tlshd should check the ALPN and extended key usage

  enhancement
  oracle/ktls-utils#31 · Filter by author chucklever opened on Sep 27, 2023

• Support for accessing material stored in a local TPM

  enhancement
  oracle/ktls-utils#30 · Filter by author chucklever opened on Sep 27, 2023

• TLS session key re-negotiation

  enhancement
  oracle/ktls-utils#29 · Filter by author chucklever opened on Sep 27, 2023
  2

• Support for restricting client certificates trusted by server

  enhancement
  oracle/ktls-utils#21 · Filter by author bwhacks opened on Jul 24, 2023
  17