All pull requests

Pull requests

• revert: new AMI for the kTLS fleet was published with updated PGP key for the github CLI.

  s2n-core
  #6109·simonmarty opened Sep 24, 2026Contributor·

  ·

• fix: clear CLIENT_AUTH on resumed TLS1.2 handshakes

  s2n-core
  #6107·CarolYeh910 opened Sep 23, 2026Contributor·

  ·
  2

• fix: use actual negotiated cipher overhead for record sizing

  #6106·FreezB11 opened Sep 23, 2026Contributor·

  ·
  1

• fix: prevent trust store switch when s2n_connection_set_config fails

  s2n-core
  #6105·CarolYeh910 opened Sep 22, 2026Contributor·

  ·

• feat(bindings): add safe TLS 1.3 early data (0-RTT) APIs

  s2n-core
  #6100·CarolYeh910 opened Sep 18, 2026Contributor·

  ·
  2

• build(deps): bump the all-gha-updates group across 1 directory with 2 updates

  dependenciesgithub_actions
  #6098·dependabot[bot] opened Sep 18, 2026Bot·

  ·

• Add ca_certificate extension support to s2n-tls

  #6096·csosto-pk opened Sep 17, 2026·

  ·
  2

• Clear negotiate_in_use on all s2n_negotiate error paths

  #6088·tanvir-ux opened Sep 13, 2026·

  ·
  1

• build(deps): update bindgen requirement from 0.72 to 0.73 in /bindings/rust/standard

  dependenciesrust
  #6084·dependabot[bot] opened Sep 9, 2026Bot·

  ·

• s2n: Make it OpenSSL 4.0 compatible

  openssl-future
  #6074·sebastianas opened Aug 29, 2026·

  ·
  1

• build(deps): update s2n-codec requirement from 0.83 to 0.88 in /bindings/rust/standard

  dependenciesrust
  #6066·dependabot[bot] opened Aug 25, 2026Bot·

  ·

• ci: test libcrypto interning on ARM

  #6065·nanookclaw opened Aug 22, 2026·

  ·
  1

  

• fix: guard DH param sizes against uint16 truncation

  s2n-core
  #6062·jouho opened Aug 21, 2026Contributor·

  ·

• test: add rust buffered send test

  s2n-core
  #6060·jmayclin opened Aug 20, 2026Contributor·

  ·

• fix: use ASN1_STRING accessors for OpenSSL 4.0 compatibility

  openssl-future
  #6058·thierryba opened Aug 20, 2026·

  ·
  1

• ci: add clang-tidy to linting

  #6057·antonkesy opened Aug 20, 2026·

  ·
  1

  7

  

• fix: enforce max handshake length in parse_message

  s2n-core
  #6055·jouho opened Aug 19, 2026Contributor·

  ·
  1

• fix: resolve Clang 18 strict warning errors

  #6052·Rajkaran-122 opened Aug 19, 2026·

  ·
  1

  12

• fix: prevent s2n_alloc from overwriting allocated blobs

  #6051·Rajkaran-122 opened Aug 19, 2026·

  ·
  1

  2

• fix: initialize s2n_cert fields in s2n_connection_get_peer_cert_chain

  s2n-core
  #6045·jouho opened Aug 17, 2026Contributor·

  ·

• fix: copy ticket key before use to avoid concurrent rotation UAF

  s2n-core
  #6043·jouho opened Aug 17, 2026Contributor·

  ·

• refactor: remove length-prefixed logic for PQ key shares

  type/post-quantum
  #6041·FreezB11 opened Aug 17, 2026Contributor·

  ·
  1

  21

• fix(tls13): Reject oversized Finished messages via exact length check

  #6040·alexw91 opened Aug 14, 2026Contributor·

  ·

• Prevent TLS1.2 handshake fragments from entering TLS1.3 post-handshak…

  #6039·FreezB11 opened Aug 14, 2026Contributor·

  ·
  1

  2

• feat: deprecate default tls13, pq policies

  s2n-core
  #6038·jmayclin opened Aug 14, 2026Contributor·

  ·
  5