Tags

LibreTLS 3.4.1

This release is based on LibreSSL 3.4.1:
https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.4.1-relnotes.txt

The shared library major version of libtls has been bumped to 22.

tls_connect(3) and friends now strip a trailing dot from servername.

A release tarball for this version can be downloaded from:
https://causal.agency/libretls/libretls-3.4.1.tar.gz

version 3.3.4-2

version 3.3.4-1

LibreTLS 3.3.4

This release is based on LibreSSL 3.3.4:
https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.3.4-relnotes.txt

No changes were made to libtls code.

A release tarball for this version can be downloaded from:
https://causal.agency/libretls/libretls-3.3.4.tar.gz

Patch 3.3.3p1

This release is based on LibreSSL 3.3.3:
https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.3.3-relnotes.txt

This patch imports the missing scripts/wrap-compiler-for-flag-check
file, which was incorrectly causing compiler flags to not be used.

A release tarball for this version can be downloaded from:
https://causal.agency/libretls/libretls-3.3.3p1.tar.gz

version 3.3.3-1

Version 3.3.3

This release is based on LibreSSL 3.3.3:
https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.3.3-relnotes.txt

> Other than the version number, it is identical to LibreSSL 3.3.2.

A release tarball for this version can be downloaded from:
https://causal.agency/libretls/libretls-3.3.3.tar.gz

Version 3.3.2

This release is based on LibreSSL 3.3.2:
https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.3.2-relnotes.txt

The relevant changes are copied below:

  * Destroy the mutex in a tls_config object on tls_config_free().

  * Allow setting a keypair on a tls context without specifying the
    private key, and fake it internally in libtls. This removes the
    need for privsep engines like relayd to use bogus keys.

  * Skip the private key check for fake private keys.

  * Move the private key setup from tls_configure_ssl_keypair() to a
    helper function with proper error checking.

  * Change the internal tls_configure_ssl_keypair() function to
    return -1 instead of 1 on failure.

  * Make supported protocols and options for DHE params more prominent
    in tls_config_set_protocols.3.

  * Use tls_set_errorx() on OCSP_basic_verify() failure since the latter
    does not set errno.

A release tarball for this version can be downloaded from:
https://causal.agency/libretls/libretls-3.3.2.tar.gz

version 3.3.1p1-1

Patch 3.3.1p1

This release is based on LibreSSL 3.3.1:
<https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.3.1-relnotes.txt>

This patch fixes OpenSSL include paths for compat sources.

A release tarball for this version can be downloaded from:
<https://causal.agency/libretls/libretls-3.3.1p1.tar.gz>

Version 3.3.1

This release is based on LibreSSL 3.3.1:
<https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.3.1-relnotes.txt>

No changes were made to libtls code.

A release tarball for this version can be downloaded from:
<https://causal.agency/libretls/libretls-3.3.1.tar.gz>

Version 3.3.0

This release is based on LibreSSL 3.3.0:
<https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.3.0-relnotes.txt>

No changes were made to libtls code.

A release tarball for this version can be downloaded from:
<https://causal.agency/libretls/libretls-3.3.0.tar.gz>

Version 3.2.2

This release is based on LibreSSL 3.2.2:
<https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.2.2-relnotes.txt>

No changes were made to libtls code.

A release tarball for this version can be downloaded from:
<https://causal.agency/libretls/libretls-3.2.2.tar.gz>

Version 3.2.1

This release is based on LibreSSL 3.2.1:
<https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.2.1-relnotes.txt>

No changes were made to libtls code.

A release tarball for this version can be downloaded from:
<https://causal.agency/libretls/libretls-3.2.1.tar.gz>

Version 3.2.0

This release is based on LibreSSL 3.2.0:
<https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.2.0-relnotes.txt>

A release tarball for this version can be downloaded from:
<https://causal.agency/libretls/libretls-3.2.0.tar.gz>