v2.5.3 - Native Trust and Peer Control

Security

macOS HTTPS certificate validation now uses Apple SecTrust and the system trust store. OpenSSL remains responsible for transport and explicit custom CA files. Legacy manual hostname verification has been removed.

Breaking Changes

Windows now rejects unsupported custom CA files instead of silently falling back to the system trust store.

Summary

This release improves peer policy control, TLS verification, option compatibility, and release reliability across Linux, macOS, Windows, and Android.

Added

• The peer blocklist RPC atomically replaces rules, disconnects matching active peers, removes blocked candidates, and reports affected peer counts.
• aria2.getVersion exposes the aria2-next product identity and RPC contract version.
• The bt-detach-seed-only input alias maps to detach-share-only. The notice log level maps to info.

Changed

• macOS uses Apple SecTrust for default certificate verification. Linux and explicit custom CA verification use OpenSSL native chain and hostname validation.
• macOS OpenSSL builds use stable CA and configuration paths without depending on the GitHub Actions workspace.
• Release binaries for all seven supported targets build in parallel before publication.

Fixed

• Peer RPC data distinguishes the active remote connection port from the peer-advertised listen port.
• Peer blocklist updates immediately remove and disconnect matching peers across active BitTorrent downloads.

Downloads

Platform	Download
Linux x86_64	aria2-next-2.5.3-linux-x86_64
Linux ARM64	aria2-next-2.5.3-linux-aarch64
macOS Apple Silicon	aria2-next-2.5.3-macos-arm64
macOS Intel	aria2-next-2.5.3-macos-x86_64
Windows x86_64	aria2-next-2.5.3-windows-x86_64.exe
Windows ARM64	aria2-next-2.5.3-windows-arm64.exe
Android ARM64	aria2-next-2.5.3-android-arm64
Checksums	aria2-next-2.5.3-checksums.sha256