2 Releases published by 1 person

• v1.5.13 Release: v1.5.13

  published Feb 22, 2025

• v1.5.14 Release: v1.5.14

  published Mar 5, 2025

50 Pull requests merged by 10 people

• test: fix self-talk pkey offload test for openssl-3.0-fips

  #5175 merged Mar 12, 2025

• test(integv2): reduce parameter selection

  #5161 merged Mar 12, 2025

• chore: add inline noqa suppression

  #5159 merged Mar 12, 2025

• ci: make start_codebuild.sh work for forks

  #5178 merged Mar 12, 2025

• test(integv2): add partial support for OpenSSL 3.0 provider

  #5131 merged Mar 12, 2025

• (docs): Improve PQ docs

  #5173 merged Mar 12, 2025

• ci: use ruff --diff instead of --check

  #5177 merged Mar 11, 2025

• chore: pin once_cell version to unblock the CI

  #5174 merged Mar 11, 2025

• fix(ruff): resolve linting errors detected by Ruff

  #5140 merged Mar 8, 2025

• fix: mark chachapoly as unavailable with openssl-3.0-fips

  #5168 merged Mar 7, 2025

• tests: fix flaky ja4 test

  #5169 merged Mar 7, 2025

• chore: update git blame ignore commit ID

  #5164 merged Mar 6, 2025

• style: fix redundant return

  #5150 merged Mar 6, 2025

• build(deps): bump nixbuild/nix-quick-install-action from 29 to 30 in /.github/workflows in the all-gha-updates group

  #5153 merged Mar 6, 2025

• refactor: add libcrypto PRF impl for openssl-3.0-fips

  #5158 merged Mar 6, 2025

• chore: binding release 0.3.13

  #5167 merged Mar 6, 2025

• chore(ci): pin symbolic-common

  #5166 merged Mar 6, 2025

• tests: try to make s2n_mem_usage_test more useful

  #5139 merged Mar 5, 2025

• chore: git-blame-ignore ruff formatting

  #5151 merged Mar 4, 2025

• chore(bindings): change in rustup behavior

  #5160 merged Mar 4, 2025

• refactor: remove unused prf hmac impls

  #5148 merged Feb 28, 2025

• chore(ci): make the awslc fips install script version aware

  #5100 merged Feb 28, 2025

• fix: memory leak during STEK rotation

  #5146 merged Feb 28, 2025

• refactor: add alternative EVP signing method

  #5141 merged Feb 27, 2025

• refactor: cleanup prf header

  #5144 merged Feb 27, 2025

• feat(bindings): expose context on cert chain

  #5132 merged Feb 26, 2025

• chore(ruff): apply formatting and integrate into CI

  #5138 merged Feb 26, 2025

• chore(nix): Add aws-lc-fips 2022/4

  #5109 merged Feb 25, 2025

• test(integv2): fixes to allow test_record_padding to partially run

  #5099 merged Feb 24, 2025

• build(deps): update rtshark requirement from 2.9.0 to 3.1.0 in /tests/pcap in the all-cargo-updates group across 1 directory

  #5087 merged Feb 21, 2025

• tests: use sig schemes as source of truth for valid hash+sig algs

  #5129 merged Feb 21, 2025

• ci: always set values for command line defines

  #5126 merged Feb 21, 2025

• fix: update callback return value

  #5136 merged Feb 21, 2025

• refactor: always use EVP hashing

  #5121 merged Feb 20, 2025

• ci: add check for third-party-src in disable rand override buildspec

  #5137 merged Feb 20, 2025

• feat: add async cert validation support

  #5110 merged Feb 20, 2025

• chore: remove unused well-known-endpoints.py

  #5127 merged Feb 20, 2025

• fix(bindings): remove mutation behind Arc

  #5124 merged Feb 19, 2025

• chore: binding release 0.3.12

  #5128 merged Feb 19, 2025

• refactor: use EVP_MD_fetch() if available

  #5116 merged Feb 19, 2025

• feat: Option to disable RAND engine override

  #5108 merged Feb 19, 2025

• fix(bindings): make Context borrow immutable

  #5071 merged Feb 19, 2025

• build(deps): update rand requirement

  #5125 merged Feb 19, 2025

• chore: fix a typo in API comments

  #5123 merged Feb 18, 2025

• bindings: unpin openssl crate from a specific patch version

  #5120 merged Feb 18, 2025

• refactor: move "s2n_libcrypto_is" methods into s2n_libcrypto.h

  #5117 merged Feb 18, 2025

• Add new security policy (20250211)

  #5111 merged Feb 18, 2025

• Revert "refactor: remove unused evp support for md5+sha1 (#5106)"

  #5118 merged Feb 18, 2025

• ci: add default provider to openssl-3.0-fips

  #5114 merged Feb 13, 2025

• fix: don't enable custom random for openssl fips

  #5093 merged Feb 13, 2025

10 Pull requests opened by 5 people

• build(deps): update regex requirement from =1.9.6 to =1.11.1 in /bindings/rust/extended

  #5133 opened Feb 20, 2025

• build(deps): update home requirement from =0.5.5 to =0.5.11 in /bindings/rust/extended

  #5134 opened Feb 20, 2025

• chore: deprecate s2n_set

  #5155 opened Feb 28, 2025

• ci: cleanup awslc-fips versioning

  #5156 opened Feb 28, 2025

• fix: remove unnecessary RC4 restriction

  #5170 opened Mar 7, 2025

• chore(ci): add a cargo timing buildspec

  #5176 opened Mar 11, 2025

• ci: move openssl3fips build to existing asan build

  #5181 opened Mar 12, 2025

• test(integv2): add ruff linting CI check

  #5182 opened Mar 12, 2025

• fix: openssl-3.0-fips should use libcrypto HKDF

  #5183 opened Mar 12, 2025

• fix: openssl-3.0-fips should use separate private rand

  #5184 opened Mar 12, 2025

19 Issues closed by 7 people

• Integ test bloat

  #4375 closed Mar 12, 2025

• openssl-3.0-fips support for PRF

  #5143 closed Mar 6, 2025

• dev: Add SAW support to nix devShell

  #1909 closed Feb 27, 2025

• dev: Automaically publish docker dev image to public repository

  #1908 closed Feb 27, 2025

• Strengthen s2n_blob_is_valid and fix unit tests

  #1847 closed Feb 27, 2025

• s2n write APIs do not return the number of actually copied bytes, and thereby allow for Stream corruption

  #1820 closed Feb 27, 2025

• Move flags from security_policy_selection set to struct s2n_security_policy

  #1816 closed Feb 27, 2025

• Add tests that uses iovec for record sending

  #1812 closed Feb 27, 2025

• Libify the self-talk tests

  #1804 closed Feb 27, 2025

• Add no_client_cert state to TLS 1.2 cryptol proof

  #1786 closed Feb 27, 2025

• Openssl-3.0-fips hash + sign

  #5105 closed Feb 27, 2025

• v1.5.10 memory leak regression when used with libcurl

  #5044 closed Feb 21, 2025

• Add option to disable OpenSSL RAND engine override

  #5102 closed Feb 19, 2025

• Comment references send instead of write

  #5115 closed Feb 18, 2025

• Allow disabling prediction resistance on drbg for systems without RDRAND

  #1771 closed Feb 13, 2025

• Decouple s2n x509 parsing and validation

  #1766 closed Feb 13, 2025

• Refactor RSA Client Key Exchange

  #1760 closed Feb 13, 2025

• Headless browser integration test

  #1757 closed Feb 13, 2025

• Rename S2N_EXTENSION_CERTIFICATE_TRANSPARENCY

  #1395 closed Feb 13, 2025

15 Issues opened by 8 people

• bindings: support s2n_connection_get_certificate_match

  #5185 opened Mar 13, 2025

• The Integv2NixBatch buildspec is not committed to code

  #5180 opened Mar 12, 2025

• The s2nUnitNix buildspec is not committed to code

  #5179 opened Mar 11, 2025

• chore(ci): Refactor GHA rust toolchain install

  #5172 opened Mar 7, 2025

• RUSTSEC-2024-0436: paste - no longer maintained

  #5171 opened Mar 7, 2025

• Unpin dependencies after bumping STANDARD (not extended) MSRV to 1.82

  #5165 opened Mar 5, 2025

• chore: Bump linting action Ubuntu version

  #5162 opened Mar 4, 2025

• Redesign Session Resumption feature

  #5154 opened Feb 28, 2025

• Create CNSA 2.0 TLS Policies

  #5152 opened Feb 27, 2025

• Completely replace legacy pkey impls with EVP impl

  #5149 opened Feb 27, 2025

• Tighten TLS1.2 Session Ticket lifetimes

  #5147 opened Feb 26, 2025

• Hyper 0.x server support

  #5142 opened Feb 24, 2025

• EVP hashing broken the HMAC SAW proof

  #5135 opened Feb 20, 2025

• Broken test/test_record_padding: I/O issues cause non zero exit sometimes

  #5130 opened Feb 19, 2025

• request: benchmark results for PQ with resumption

  #5113 opened Feb 13, 2025

28 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• docs(bindings): add example for kms pkey offload

  #4980 commented on Feb 28, 2025 • 1 new comment

• feat(bindings): add psk selection api

  #5101 commented on Feb 27, 2025 • 0 new comments

• build(deps): update tokio-macros requirement from =2.3.0 to =2.5.0 in /bindings/rust/extended

  #5091 commented on Mar 11, 2025 • 0 new comments

• build(deps): update foreign-types requirement from 0.3 to 0.5 in /bindings/rust/extended

  #5090 commented on Mar 12, 2025 • 0 new comments

• build(deps): update zeroize requirement from =1.7.0 to =1.8.1 in /bindings/rust/extended

  #5089 commented on Mar 11, 2025 • 0 new comments

• docs(bindings): add external psk example

  #5062 commented on Feb 27, 2025 • 0 new comments

• ci: add more awslc-fips-2022 testing

  #5049 commented on Feb 27, 2025 • 0 new comments

• Add Openssl-3.0-fips to the CI

  #5036 commented on Mar 13, 2025 • 0 new comments

• Unpin dependencies after bumping MSRV to 1.70

  #4395 commented on Mar 11, 2025 • 0 new comments

• IntegV2 Usability Quest

  #5027 commented on Mar 10, 2025 • 0 new comments

• Add snapshot test for invoked integrationv2 tests

  #5097 commented on Mar 8, 2025 • 0 new comments

• dev: Add CBMC support to nix devShell

  #1910 commented on Feb 27, 2025 • 0 new comments

• Change return 0, 1 to return S2N_SUCCESS, S2N_FAILURE

  #1897 commented on Feb 27, 2025 • 0 new comments

• Standardize how we exit tests

  #1893 commented on Feb 27, 2025 • 0 new comments

• Support loading DER-encoded certificates and private keys

  #4386 commented on Feb 25, 2025 • 0 new comments

• Allow s2n_stuffer_raw_write() to be guarded

  #1777 commented on Feb 13, 2025 • 0 new comments

• LLVMFuzzerInitialize doesn't not error on Non Zero

  #1772 commented on Feb 13, 2025 • 0 new comments

• Add Docker image to be able to test cryptol

  #1739 commented on Feb 13, 2025 • 0 new comments

• Use non-zero to represent CLIENT_HELLO in state machine

  #1707 commented on Feb 13, 2025 • 0 new comments

• ">= S2N_TLSX" vs "== S2N_TLSX"

  #1681 commented on Feb 13, 2025 • 0 new comments

• Test for a Client That Exceeds the Maximum Fragment Length

  #1633 commented on Feb 13, 2025 • 0 new comments

• Reduce code duplication in SSLv2 handshake handling

  #1601 commented on Feb 13, 2025 • 0 new comments

• Optimize usage of evp_pkey params for higher performance

  #1410 commented on Feb 13, 2025 • 0 new comments

• bindings: standardize link format

  #5095 commented on Feb 13, 2025 • 0 new comments

• Update KMS PQ integration test to assert ML-KEM

  #5086 commented on Feb 13, 2025 • 0 new comments

• better error when calling s2n_offered_psk_list_choose_psk with empty PSK

  #5085 commented on Feb 13, 2025 • 0 new comments

• Add test for consuming s2n-tls with CMake via FetchContent

  #5079 commented on Feb 13, 2025 • 0 new comments

• Feature probes fail to enable supported libcrypto features due to missing linker flags

  #5078 commented on Feb 13, 2025 • 0 new comments