2.0.0-M13 Released.

[boaks]

Though a lot of small issues have been fixed and the question, when the M13 will be release, was already raised (see #810 (comment)), I started to think about a M13 release.

Proposal:

• include the initial proposed fix for issue HandshakeException cannot be serialized because of AlertMessage field #776, PR Fix issue #776. #830
• updated "about.html"s, PR Update about html's. #829
• issue Ping implementation send Empty Message with Uri-Host option #677, PR Fix serialization of empty messages. #828
• PR Remove connections of failed handshakes. #826

The implementation of the <a https://github.com/tlswg/dtls-conn-id/blob/master/draft-ietf-tls-dtls-connection-id.md>draft-ietf-tls-dtls-connection-id showed first successful message exchanges, but also, that the changes/redesigns are too large to be released soon.

Any opinions?
Additional issues, which should be fixed for M13?

[boaks]

I add PR #835 and #836 to M13.

That are the fixes for findings during my work on the connection id #824

[sbernard31]

I looked quickly PRs above. That's sounds good to me.
We could maybe fix #834 for M13 ?
I'm ok about not adding 'connection id' for now.

[boaks]

We could maybe fix #834 for M13 ?

Sure.
Today I found also a unit test issue of java 11 with TLS (it now uses TLSv1.3, which breaks a unit test). I have already the fix, but I would like to improve it a little more.

[boaks]

I'm done with PR #829 .
If noone has an objection, I will merge it on Monday and start the M13 release.

[boaks]

Released!

[sbernard31]

I started to integrate it in Leshan (eclipse-leshan/leshan#644)

Some feedbacks :

1. In DtlsConnectorConfig, getTrustStore is deprecated but there is no alternative proposed:

/**
 * Gets the trusted root certificates to use when verifying
 * a peer's certificate during authentication.
 * 
 * @return the root certificates
 */
@Deprecated
public X509Certificate[] getTrustStore() {

In Leshan, we are using it but maybe for overkill check ..

2. create an coapServer and destroy it without started it before raise an NPE :

java.lang.NullPointerException
	at org.eclipse.californium.core.CoapServer.destroy(CoapServer.java:291)
	at org.eclipse.leshan.client.californium.impl.CaliforniumEndpointsManager.destroy(CaliforniumEndpointsManager.java:256)
	at org.eclipse.leshan.client.californium.LeshanClient.destroy(LeshanClient.java:139)
	at org.eclipse.leshan.integration.tests.RegistrationTest.stop(RegistrationTest.java:71)

I agree this is an unusual use case but I think it can make sense.

3. The API changes in DtlsConnectorConfig about CertificateType are great. 👍

[boaks]

For 1.
Though the "trust" is now implemented with a CertificateVerifier, I'm not sure, if the getter makes sense, at least not, if a custom CertificateVerifier is used. But with changed javadoc, we can undeprecate it :-).

[boaks]

For 2.
Will be fixed in M14 :-).

[boaks]

1. done, 2 see PR Remove deprecated from trust store. #856