All pull requests

Pull requests

• test: add unit test for handling of dummy EncryptedClientHello

  #6124·FreezB11 opened Oct 13, 2026Contributor·

  ·
  1

• feat(metrics): report connection & handshake concurrency

  #6123·Mark-Simulacrum opened Oct 8, 2026Contributor·

  ·

• fix(mem): Reverse MADV_DONTDUMP on mlock allocator free

  #6120·alexw91 opened Oct 7, 2026Contributor·

  ·

• build(deps): update s2n-codec requirement from 0.83 to 0.90 in /bindings/rust/standard

  dependenciesrust
  #6118·dependabot[bot] opened Oct 5, 2026Bot·

  ·

• build(deps): update crabgrind requirement from 0.3 to 0.4 in /tests/regression in the all-cargo-updates group across 1 directory

  dependenciesrust
  #6117·dependabot[bot] opened Oct 5, 2026Bot·

  ·

• test: assert ML-KEM in KMS PQ integration test

  #6115·Kapsulon opened Oct 2, 2026·

  ·
  1

  1

• fix: reject TLS1.2 resumption with required client auth

  s2n-core
  #6107·CarolYeh910 opened Sep 23, 2026Contributor·

  ·
  6

• fix: use actual negotiated cipher overhead for record sizing

  #6106·FreezB11 opened Sep 23, 2026Contributor·

  ·
  1

• feat(bindings): add safe TLS 1.3 early data (0-RTT) APIs

  s2n-core
  #6100·CarolYeh910 opened Sep 18, 2026Contributor·

  ·
  5

• Add ca_certificate extension support to s2n-tls

  #6096·csosto-pk opened Sep 17, 2026·

  ·
  2

• Clear negotiate_in_use on all s2n_negotiate error paths

  #6088·tanvir-ux opened Sep 13, 2026·

  ·
  1

• ci: test libcrypto interning on ARM

  #6065·nanookclaw opened Aug 22, 2026·

  ·
  1

  

• test: add rust buffered send test

  s2n-core
  #6060·jmayclin opened Aug 20, 2026Contributor·

  ·

• ci: add clang-tidy to linting

  #6057·antonkesy opened Aug 20, 2026·

  ·
  1

  7

  

• fix: resolve Clang 18 strict warning errors

  #6052·Rajkaran-122 opened Aug 19, 2026·

  ·
  1

  12

• fix: prevent s2n_alloc from overwriting allocated blobs

  #6051·Rajkaran-122 opened Aug 19, 2026·

  ·
  1

  4

• fix(tls13): Reject oversized Finished messages via exact length check

  #6040·alexw91 opened Aug 14, 2026Contributor·

  ·

• fix: prevent TLS1.2 handshake fragments from entering TLS1.3 post-handshake path

  #6039·FreezB11 opened Aug 14, 2026Contributor·

  ·
  1

  3

• feat: deprecate default tls13, pq policies

  s2n-core
  #6038·jmayclin opened Aug 14, 2026Contributor·

  ·
  5

• fix(ktls): Validate record type in s2n_ktls_recvmsg

  #6030·alexw91 opened Aug 10, 2026Contributor·

  ·
  1

• fix(metrics): check local cert key type in policy compatibility

  status/stale
  #6015·Harikeshav-R opened Jul 28, 2026Contributor·

  ·
  1

  4

• perf: pre-compute required transcript hashes per security policy

  status/stale
  #6010·MrMistic opened Jul 24, 2026Contributor·

  ·
  4

• fix: Null parsed_extension pointers when raw_message is freed s2n_ext…

  #5993·alexw91 opened Jul 15, 2026Contributor·

  ·
  1

• fix: Free pre-existing allocation in s2n_alloc to prevent memory leak…

  #5990·alexw91 opened Jul 15, 2026Contributor·

  ·
  2

• perf: reuse hybrid key as standalone classical key share

  #5989·MrMistic opened Jul 15, 2026Contributor·

  ·
  7