PublicAll releasesChangelog
- 66a9ff3c4f211853c3908ba06c7cd103f9a917da Retain the receive replay cutoff across Resume
- 9365bfd5256fb664dd964b4b5d7942b5180e1066 Reject resumption of incomplete connection state
- 1b7dd0b1ef6d239d340286e8f750612786d590ec Validate cookies before resuming server sessions
- 93a9fd1f709136e8eb1ab30d960aa8e1ecfa10d7 Authenticate peers again on session resumption
- ff414eb3e800a5be0f61df8bd194e5292d5635cd Recheck PSK credentials before resuming sessions
- a470668104cc3ca997a09cc3e27333dc23d8391a Preserve extended master secret on resumption
- 2b234cd7174fc758372de0e479fc66515f54f631 Bind cached sessions to role and cipher suite
- ce84b979bcb5449727b3ea5c57add4e1edb33284 Save sessions only after client authentication
- a3c79926a44d01e6174daad4249d3677c02f1990 Backport ALPN selection validation
- fe06b60c1c229da538cf65b68c649d14644f7f71 Backport late plaintext alert validation
- ffac271de323e9ea58ad5439f0fd8ae59f6fe1c8 Count UDP connections before exposing them to Accept
- 0c3b8c4c2e7f0c3e69d64fb1e1a72c99983c1a6f Reject unsupported DTLS record epochs
- ec46cde6e3ffe4203b9609ae578d5dc1ae0c14a5 Retransmit cookie challenges only for ClientHello retries
- a460d839d8541ca8c94ba88995811cc330d34712 Select cipher suites using the SNI certificate
- ad3c3e0a92de82d832e3f3aa026518e80a470baa Reject unrequested client certificates
- 7c422639dea5fed604e6925095fe60e5b0504344 Check server certificate keys against the cipher suite
- 9d0557bd1c655fd523024f9bb8d2ff2713b518f2 Distinguish RSA-PSS certificate signature schemes
- a1332dae516d6ce75cf711a19904c5dcfadbf538 Reject empty certificate entries
- 4a04e7c503194e8470b60dc27efebce1232f21fa Bound SNI processing during certificate selection
- a4f3e27909ec4d7ddeaeec750c0c8b6d1bf18622 Preserve IP server names for certificate verification
- 72b2865a4544aece68b0bbcee29733eb0eca8a83 Fix PSK identity-hint length overflow