ktls-utils
FIPS 140-3NetworkingHandshake service for kernel TLS consumers
Handshake service for kernel TLS consumers
ktls-utils provides a TLS handshake user agent (tlshd) that services TLS handshake requests on behalf of kernel TLS consumers. In-kernel TLS consumers need a mechanism to perform TLS handshakes on connected sockets to negotiate TLS session parameters that can then be programmed into the kernel's TLS record protocol engine.
This package materializes kernel socket endpoints in user space to perform TLS handshakes using the GnuTLS library. After each handshake completes, tlshd plants negotiated session parameters back into the kernel via standard kTLS socket options, enabling the kernel to handle the TLS record protocol for subsequent communication.