S2n Versions Save

Weekly release for April 16 2024

What's Changed

• fix: Wipe conn->in on all record parse failures by @goatgoose in https://github.com/aws/s2n-tls/pull/4499
• feat: Release C APIs for serialization by @maddeleine in https://github.com/aws/s2n-tls/pull/4501
• refactor: combine TLS1.2 and TLS1.3 sig scheme representations by @lrstewart in https://github.com/aws/s2n-tls/pull/4498
• feat: Serialization Rust APIs by @maddeleine in https://github.com/aws/s2n-tls/pull/4493

Full Changelog: https://github.com/aws/s2n-tls/compare/v1.4.11...v1.4.12

Release for Apr 11 2023

What's Changed

• fix: better errors for all client auth failures by @lrstewart in https://github.com/aws/s2n-tls/pull/4492
• fix: correct broken early data test by @lrstewart in https://github.com/aws/s2n-tls/pull/4494
• fix: add missing TLS1.3 p521 sig schemes by @lrstewart in https://github.com/aws/s2n-tls/pull/4496
• tests: Serialization feature with post-handshake features by @maddeleine in https://github.com/aws/s2n-tls/pull/4489
• feat(binding): add key update request api by @jmayclin in https://github.com/aws/s2n-tls/pull/4469
• chore(bindings): release 0.2.2 by @toidiu in https://github.com/aws/s2n-tls/pull/4497

Full Changelog: https://github.com/aws/s2n-tls/compare/v1.4.10...v1.4.11

Weekly release for April 10 2024

What's Changed

• fix(bindings): print cargo commands to stdout by @camshaft in https://github.com/aws/s2n-tls/pull/4482
• chore(bindings): release 0.2.1 by @lrstewart in https://github.com/aws/s2n-tls/pull/4486
• feat: connection serialization by @maddeleine in https://github.com/aws/s2n-tls/pull/4468
• feat: reduce read syscalls to improve performance by @lrstewart in https://github.com/aws/s2n-tls/pull/4485
• feat: add s2n_peek_buffered by @lrstewart in https://github.com/aws/s2n-tls/pull/4490

Full Changelog: https://github.com/aws/s2n-tls/compare/v1.4.9...v1.4.10

Weekly release for April 02 2024

What's Changed

• chore(bindings): release 0.1.7 by @camshaft in https://github.com/aws/s2n-tls/pull/4462
• fix: pedantic memory leak in handshake test by @jmayclin in https://github.com/aws/s2n-tls/pull/4463
• fix(test): narrow valgrind suppressions by @jmayclin in https://github.com/aws/s2n-tls/pull/4369
• Make S2N_CERT_AUTH_OPTIONAL the default for clients by @lrstewart in https://github.com/aws/s2n-tls/pull/4390
• bindings: mark Connection as Sync by @lrstewart in https://github.com/aws/s2n-tls/pull/4467
• bindings: ensure CFLAGS includes come after build script includes by @lrstewart in https://github.com/aws/s2n-tls/pull/4475
• feat: getter for TLS1.2 master secrets by @lrstewart in https://github.com/aws/s2n-tls/pull/4470
• example(bindings): client hello cb example by @jmayclin in https://github.com/aws/s2n-tls/pull/4385
• fix: refactor rust bindings fingerprint methods by @maddeleine in https://github.com/aws/s2n-tls/pull/4474
• fix: Adds non_exhaustive flag to FingerprintType by @maddeleine in https://github.com/aws/s2n-tls/pull/4481
• ci: add asan runs under gcc by @jmayclin in https://github.com/aws/s2n-tls/pull/4402
• New TLS1.2-only variant of 20230317 policy by @lrstewart in https://github.com/aws/s2n-tls/pull/4483

Full Changelog: https://github.com/aws/s2n-tls/compare/v1.4.8...v1.4.9

What's Changed

• fix(bindings): Apply with_system_certs to Config builder() API by @goatgoose in https://github.com/aws/s2n-tls/pull/4456
• refactor: make memmove vs memcpy behavior clearer by @lrstewart in https://github.com/aws/s2n-tls/pull/4447
• refactor: clang-tidy null deref and undefined mod by @jmayclin in https://github.com/aws/s2n-tls/pull/4436
• build: remove unnecessary includes by @jmayclin in https://github.com/aws/s2n-tls/pull/4451
• feat: Add FIPS mode getter API by @goatgoose in https://github.com/aws/s2n-tls/pull/4450
• style: fix declarations without initial value by @jmayclin in https://github.com/aws/s2n-tls/pull/4404
• Add s2n_stuffer_shift by @lrstewart in https://github.com/aws/s2n-tls/pull/4458
• refactor: UBSAN build and address out of bound reads by @jmayclin in https://github.com/aws/s2n-tls/pull/4440
• feat: Add additional EC key validation for FIPS by @goatgoose in https://github.com/aws/s2n-tls/pull/4452

Full Changelog: https://github.com/aws/s2n-tls/compare/v1.4.7...v1.4.8

What's Changed

• style: manual initial value fix by @jmayclin in https://github.com/aws/s2n-tls/pull/4449
• api: add key update request functionality by @jmayclin in https://github.com/aws/s2n-tls/pull/4453

Full Changelog: https://github.com/aws/s2n-tls/compare/v1.4.6...v1.4.7

What's Changed

• Add Rust bindings for certificate chains by @Mark-Simulacrum in https://github.com/aws/s2n-tls/pull/4398
• fix(test): fix dangling pointers in cert verify test by @jmayclin in https://github.com/aws/s2n-tls/pull/4430
• Extend license check to .rs files by @Mark-Simulacrum in https://github.com/aws/s2n-tls/pull/4428
• feat: apply cert signature preferences locally by @jmayclin in https://github.com/aws/s2n-tls/pull/4407
• test: add cert chain with mixed key sizes by @jmayclin in https://github.com/aws/s2n-tls/pull/4433
• chore: bindings bump by @maddeleine in https://github.com/aws/s2n-tls/pull/4437
• feat: add cert key preferences by @jmayclin in https://github.com/aws/s2n-tls/pull/4434
• fix: prevent enabling ktls with a buffered record header fragment by @lrstewart in https://github.com/aws/s2n-tls/pull/4426
• Relax HRR consistency requirements for second client hello by @goatgoose in https://github.com/aws/s2n-tls/pull/4429
• fix: Unsets global libcrypto rand by @maddeleine in https://github.com/aws/s2n-tls/pull/4424
• refactor: fix unread variable warnings by @jmayclin in https://github.com/aws/s2n-tls/pull/4405
• refactor: enforce stuffer return check by @jmayclin in https://github.com/aws/s2n-tls/pull/4399
• docs: Specify the return value of S2N_FAILURE for IO APIs by @goatgoose in https://github.com/aws/s2n-tls/pull/4446

Full Changelog: https://github.com/aws/s2n-tls/compare/v1.4.5...v1.4.6

Weekly release for February 23 2024

What's Changed

• bindings: use aws-lc-rs instead of aws-lc-sys by @camshaft in https://github.com/aws/s2n-tls/pull/4415
• chore(bindings): release 0.1.4 by @WesleyRosenblum in https://github.com/aws/s2n-tls/pull/4418
• chore(bindings): release 0.1.5 by @WesleyRosenblum in https://github.com/aws/s2n-tls/pull/4420
• cleanup: Remove unused dependencies by @maddeleine in https://github.com/aws/s2n-tls/pull/4417
• refactor: zero static s2n_configs on cleanup by @jmayclin in https://github.com/aws/s2n-tls/pull/4416
• feat: Server name getter for client hello by @maddeleine in https://github.com/aws/s2n-tls/pull/4396
• fix: s2n_shutdown should handle partial records by @lrstewart in https://github.com/aws/s2n-tls/pull/4421
• chore(ci): Give OpenBSD CI job a performance boost by @knightjoel in https://github.com/aws/s2n-tls/pull/4427
• fix: parse fragmented sslv2 client hellos by @lrstewart in https://github.com/aws/s2n-tls/pull/4425

Full Changelog: https://github.com/aws/s2n-tls/compare/v1.4.4...v1.4.5

Weekly release for February 14 2024

What's Changed

• enforce result checking for blob and mem by @jmayclin in https://github.com/aws/s2n-tls/pull/4389
• s2n-tls-tokio: use s2n_shutdown_send instead of s2n_shutdown by @lrstewart in https://github.com/aws/s2n-tls/pull/4374
• chore(bindings): bump aws-lc-sys by @toidiu in https://github.com/aws/s2n-tls/pull/4393
• chore(bindings): release by @toidiu in https://github.com/aws/s2n-tls/pull/4388
• utils: add map iteration iterator by @jmayclin in https://github.com/aws/s2n-tls/pull/4377
• Check fd status before using urandom by @goatgoose in https://github.com/aws/s2n-tls/pull/4352
• fix: only initialize default tls 1.3 config in tests by @camshaft in https://github.com/aws/s2n-tls/pull/4302
• feat: More client hello getters by @maddeleine in https://github.com/aws/s2n-tls/pull/4380
• refactor: generalize cert sig preference handling by @jmayclin in https://github.com/aws/s2n-tls/pull/4379
• style(bindings): address new clippy lint by @jmayclin in https://github.com/aws/s2n-tls/pull/4411
• build: make CMake test flags more consistent with make by @jmayclin in https://github.com/aws/s2n-tls/pull/4392
• refactor: Consolidate record wiping by @lrstewart in https://github.com/aws/s2n-tls/pull/4412
• allows cmake to force crypto linkage. by @sbiscigl in https://github.com/aws/s2n-tls/pull/4383

New Contributors

• @sbiscigl made their first contribution in https://github.com/aws/s2n-tls/pull/4383

Full Changelog: https://github.com/aws/s2n-tls/compare/v1.4.3...v1.4.4

Weekly release for January 30 2024

What's Changed

• refactor: ossl x509 parsing by @jmayclin in https://github.com/aws/s2n-tls/pull/4351
• feature: Use S2N_FAST_INTEG_TESTS to run pytest in parallel under nix by @dougch in https://github.com/aws/s2n-tls/pull/4368
• test: add additional test certs by @jmayclin in https://github.com/aws/s2n-tls/pull/4353
• chore: bindings release 0.1.2 by @jmayclin in https://github.com/aws/s2n-tls/pull/4376
• test: additional test certs by @jmayclin in https://github.com/aws/s2n-tls/pull/4378
• chore: add valgrind to nix develop by @dougch in https://github.com/aws/s2n-tls/pull/4365
• test: Adds SSLv3 integ test by @maddeleine in https://github.com/aws/s2n-tls/pull/4372
• More specific error for unexpected cert request by @lrstewart in https://github.com/aws/s2n-tls/pull/4381
• Fix SSLv3 detection with AWS-LC by @goatgoose in https://github.com/aws/s2n-tls/pull/4361
• ci: Disable broken rust dry-runs by @lrstewart in https://github.com/aws/s2n-tls/pull/4384

Full Changelog: https://github.com/aws/s2n-tls/compare/v1.4.2...v1.4.3