PublicAll releasesChangelog
- 79dc6cb5d933375232b55fd8a70684411fc52afe Coalesce required KeyUpdate responses
- 9bdb8a4d97be01fdc62bfe0e7d38d69af6a61898 Keep detached read errors from blocking the driver
- ab311fd375f87f2245e0960803e29a420fd39914 Authenticate detached application data delivery
- 9c02a60bfe8e86f022273039f96ae41634ffcbea Retain the receive replay cutoff across Resume
- 436c15e35ed324bf5346e715161ce1f39fa36d4c Reject resumption of incomplete connection state
- 8deed2f2dea7a76c363b5314b3cc533e0a3200ac Bound DTLS 1.2 handshake cache memory usage
- 19c8d70d48dd3866974ab845265e9dde158d0d91 Validate cookies before resuming server sessions
- 70954c99e2dc8a9554a5823129aca055c32fd1a0 Authenticate peers again on session resumption
- b674a57834c411c01530a28a03fb1f4a0c7d04a7 Recheck PSK credentials before resuming sessions
- 674911d1c81db80028eac94897a664145748b2b5 Preserve extended master secret on resumption
- b8359836b8941ff2a37ad50fb23f801edebeece8 Bind cached sessions to role and cipher suite
- c8b0a45dedcf14ff9b50d04e80f2992bd168886f Select cipher suites using the SNI certificate
- 35aad8693c325da634a7ca156e8a92ad7c9861cb Validate DTLS 1.2 ALPN selection
- cc655dfbccac91f90512524a2dfb8a1f22a789e6 Restrict cookie challenges to ClientHello retries
- c1594b6de6828861a31de282c961b8fd4a0800fa Negotiate DTLS parameters from the cookie CH
- 9368f217f10068c7e585d6a2d0d2331fa62f9493 Reject unoffered curves in DTLS client exchange
- 410ac0ef28df49757d3a695c10dda75137e1dbf2 Save sessions only after client authentication
- 37de8de5c79bbd36b5872758e119ff704395e555 Reject unrequested client certificates
- dae8186bdbacc71c4275ebbc2f83718ef55ed240 Verify client Finished in DTLS 1.2 handshakes
- a0f0f8a7222e03d934e17abf1772764df825237a Process the client certificate flight once
- 3209f9e858ae6518f35b1af327a55b375948460f Keep early application data from blocking Finished
- 33b9e4c7321390396999852c4742c87c90c3849c Reject unsupported DTLS 1.2 record epochs
- 9fe009bf4ce508fdaf64a14a10fd9bb6f27d85d5 Count UDP connections before exposing them
- 68ff298b834b03ff0ee639d2baf4f18e042e21cb Preserve IP names for certificate verification
- c4afd84b7b557e0c53810bb9de80b3581e17fa4e Match server certificate keys to the cipher suite
- 61575481747302c4bc08827f6c8e0a4c4f1e88e8 Honor local signature policy for CertificateVerify
- 19003de7afd6d1bdf3f640034dcfd68c21d64be2 Distinguish RSA-PSS certificate signature schemes
- 0b615da56cf134adba79d75a817e21008cc7c9a5 Limit peer RSA keys before signature verification
- 87aff19290780eb4b2db31d1402faf8f425a8ff1 Validate handshake signatures against keys
- fc93d75baef53bcb65e008135dd66afe0d28acdf Bound SNI processing during certificate selection
- c08e46d24fbfe86b20fe3218ccb797c8c840be94 Reject empty certificate entries
- fd1f2dbf7ff0ece2fbeb271bd9f0f5b3b2edd549 Fix PSK identity-hint length overflow
- 573e1ff5c8ca3c1ba26ec0a143b5aeacc7ffa6c0 Return illegal_parameter for invalid compression
- c8b9a6bc4f27c827bdce66f977390b2205ef173b Reject 1.3 CH with no shared group
- 99766f7a372a6706046df7cca551660672e5d704 Delay ACKs as suggested in RFC 9147
- aa9873c359b81dbd878f0dedb193c2a654526d33 Fix DTLS 1.3 alert for invalid Finished messages