--- rpc.tlsservd.c.sav	2022-02-23 14:06:29.652800000 -0800
+++ rpc.tlsservd.c	2022-02-23 14:07:58.876986000 -0800
@@ -639,6 +639,9 @@ rpctls_setup_ssl(const char *certdir)
 		SSL_CTX_set_verify(ctx, SSL_VERIFY_PEER,
 		    rpctls_verify_callback);
 	}
+#ifdef SSL_OP_ENABLE_KTLS
+	SSL_CTX_set_options(ctx, SSL_OP_ENABLE_KTLS);
+#endif
 #ifdef SSL_MODE_NO_KTLS_TX
 	SSL_CTX_clear_mode(ctx, SSL_MODE_NO_KTLS_TX | SSL_MODE_NO_KTLS_RX);
 #endif
--- rpc.tlsclntd.c.sav	2022-02-23 14:08:10.224253000 -0800
+++ rpc.tlsclntd.c	2022-02-23 14:09:19.261835000 -0800
@@ -571,6 +571,9 @@ rpctls_setupcl_ssl(void)
 #else
 	flags = SSL_OP_NO_SSLv2 | SSL_OP_NO_SSLv3 | SSL_OP_NO_TLSv1_3;
 #endif
+#ifdef SSL_OP_ENABLE_KTLS
+	flags |= SSL_OP_ENABLE_KTLS;
+#endif
 	SSL_CTX_set_options(ctx, flags);
 #ifdef SSL_MODE_NO_KTLS_TX
 	SSL_CTX_clear_mode(ctx, SSL_MODE_NO_KTLS_TX | SSL_MODE_NO_KTLS_RX);