This release contains several important bug fixes.
Changes
- Sync to libtls from libressl 4.3.0.
- Drop MD5+SHA1 support now that TLS < 1.2 is disabled.
- Port tests to BearSSL and run them with the
checktarget. - Use BR_FEATURE_X509_TIME_CALLBACK if available to extract peer
certificate validity period. - Explicitly disallow empty server names to prevent unintended name
match. - Protect against invalid tls_write() retry.
Bug fixes
- Fix return value of tls_close() after sending close_notify.
- Fix string parsing and allocation bugs in tls_config_parse_alpn().
- Fix construction of peer cert subject with empty subject.
- Fix some memory leaks.