Skip to content

v1.1.0

Latest
Latest

Choose a tag to compare

View all tags
@iceking2nd iceking2nd released this 24 Jun 16:16
v1.1.0
2c49f9c
This commit was signed with the committer’s verified signature.
iceking2nd Daniel Wu
GPG key ID: DBCEF85E7A6ECFEC
Verified
Learn about vigilant mode.

Highlights

v1.1.0 adds four new feature areas on top of v1.0.0, all backwards-compatible:

  • TLS and DTLS transports (RFC 6614, RFC 7360) — transport.ListenTLS/DialTLS and transport.ListenDTLS/DialDTLS with shared Length-framed read/write helpers. DTLS uses github.com/pion/dtls/v3.
  • FreeRADIUS dictionary parser + code generator — dictionary/parser parses $INCLUDE/ATTRIBUTE/VALUE/VENDOR/BEGIN-VENDOR/ALIAS/BEGIN-TLV/BEGIN-ENUM with cycle detection; dictionary/gen and the cmd/dict-gen CLI emit typed Go source (constants + accessor pairs).
  • Vendor-Specific Attribute sub-packages — vendors/cisco, vendors/h3c, vendors/juniper, vendors/alcatel, vendors/redback, vendors/microsoft with typed constructors. Microsoft sub-package wires the crypto package's MS-CHAPv2 / Authenticator Response helpers into the RFC 2548 VSA format.
  • Runtime dictionary registration — (*Dictionary).RegisterFromDict bridges parsed dictionaries into the runtime registry; dictionary.TypeRaw handles attributes whose wire codec is not implemented.

Security

Upgraded github.com/pion/dtls from v2.2.12 to v3.1.4 to fix GO-2026-4479 / CVE-2026-26014 (AES-GCM nonce leakage). The v2 line is permanently affected; only v3.0.11+/v3.1.1+ have the fix. The vulnerability only affects the new DTLS transport introduced in this release; v1.0.0 did not ship DTLS and is not affected.

Supported RFCs

New in this release: RFC 6614 (RADIUS/TLS), RFC 7360 (RADIUS/DTLS).

Full changelog: https://github.com/wxccs/radius/blob/main/CHANGELOG.md

Assets 2
Loading