Skip to content

feat(ingress): enable X25519MLKEM768 TLS - #119

Merged
h4x3rotab merged 1 commit into
mainfrom
fix/dstack-ingress-x25519mlkem768
Sep 3, 2026
Merged

feat(ingress): enable X25519MLKEM768 TLS#119
h4x3rotab merged 1 commit into
mainfrom
fix/dstack-ingress-x25519mlkem768

Conversation

@h4x3rotab

Copy link
Copy Markdown
Contributor

Summary

  • upgrade the pinned HAProxy runtime to OpenSSL 3.5.7
  • enable X25519MLKEM768 while retaining secp384r1
  • refresh the Trixie package lock and CPython 3.13 wheel hashes
  • add a container smoke test that offers only X25519MLKEM768

Verification

  • ./build-image.sh (reproducible OCI build)
  • ./scripts/tests/test_x25519mlkem768.sh dstack-ingress-pqc:local
    • negotiated TLS 1.3 group: X25519MLKEM768
  • bash scripts/tests/test_sanitizers.sh
  • python3 scripts/tests/test_certman.py
  • python3 scripts/tests/test_dnsguide.py
  • python3 scripts/tests/test_deterministic_key.py
  • shellcheck scripts/tests/test_x25519mlkem768.sh

@h4x3rotab
h4x3rotab merged commit 9a25b98 into main Sep 3, 2026
6 checks passed
@h4x3rotab
h4x3rotab deleted the fix/dstack-ingress-x25519mlkem768 branch September 3, 2026 19:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant