Repository navigation

Sync main with pion/dtls main - #4

Merged

boks1971 merged 365 commits into

mainfrom

sync-pion-main

Oct 23, 2026

Merged

Sync main with pion/dtls main#4
boks1971 merged 365 commits into
mainfrom
sync-pion-main

This pull request is big! We're only showing the most recent 250 commits

Commits on Aug 8, 2026
- Remove redundant 13-suffixes
  JoTurk
  committed
  de94497
Commits on Aug 9, 2026
- Implement outbound keyUpdate
  JoTurk
  committed
  e39ed7f
- Implement inbound keyUpdate
  JoTurk
  committed
  d26388d
Commits on Aug 10, 2026
- Add 1.3 CID state scaffold
  JoTurk
  committed
  eb478be
- Add public UpdateKeys API
  JoTurk
  committed
  b053693
- Use one-shot completion for post-handshake result
  JoTurk
  committed
  676e2a7
Commits on Aug 11, 2026
- Recognize partial handshake retransmissions
  JoTurk
  committed
  7e28696
- Resume and ACK split flights
  JoTurk
  committed
  22a0632
- Handle duplicated Flight 4
  JoTurk
  committed
  ae4a3f4
Commits on Aug 12, 2026
- Implement static 1.3 CID negotiation
  JoTurk
  committed
  ca2e79a
- Integrate CID into record-layer and conn
  JoTurk
  committed
  39e16ac
- Simplify flights code, remove nolints
  JoTurk
  committed
  ed2de9b
Commits on Aug 13, 2026
- Test Flights static CID handling
  JoTurk
  committed
  509006f
- Fuzz CID in record headers
  JoTurk
  committed
  4cf73e6
- Update README for DTLS 1.3
  JoTurk
  committed
  c22de29
- Use tools.ietf.org for spec links
  JoTurk
  committed
  767d044
- Extenstion framing api, split by version
  JoTurk
  committed
  c4cce43
- Switch to the new extensions API
  JoTurk
  committed
  d24c3f5
- Remove old extensions API
  JoTurk
  committed
  3e402c2
- Serialize DTLS 1.3 application writes
  Sean-Der
  committed
  026b615
Commits on Aug 14, 2026
- Port fuzz tests from old API
  JoTurk
  committed
  f26320b
Commits on Aug 15, 2026
- Implement Error for Alert
  JoTurk
  committed
  ce64684
- Validate extension blocks by context
  JoTurk
  committed
  76fe765
- Propagate handshake cache errors
  JoTurk
  committed
  38db60f
Commits on Aug 16, 2026
- Reuse decoded handshake messages
  JoTurk
  committed
  cdf5b6a
- Snapshot final clientHello offers
  JoTurk
  committed
  a059c38
- Reject unsolicited ServerHello extensions
  JoTurk
  committed
  e737235
Commits on Aug 17, 2026
- Restore curves after daul-stack fallback
  JoTurk
  committed
  e9c4270
- Validate ServerHello against ClientHello
  JoTurk
  committed
  c0941c5
- Make CID negotiations transactional
  JoTurk
  committed
  6cfb06f
- Update module github.com/stretchr/testify to v1.12.0 (#1032)
  renovate[bot]
  authored
  94be68e
Commits on Aug 18, 2026
- Test CID negotiation
  JoTurk
  committed
  64e2a86
Commits on Aug 19, 2026
- Negotiate 1.2 SRTP / MKI from final offers
  JoTurk
  committed
  7383b8e
- Negotiate SRTP in EncryptedExtensions
  JoTurk
  committed
  1211026
- Update module github.com/stretchr/testify to v1.12.1
  
  renovate[bot]
  authored and
  JoTurk
  committed
  f9a8aee
- Require and test SRTP profiles
  JoTurk
  committed
  c5a27e6
Commits on Aug 20, 2026
- Add shared ClientHello retry validation
  JoTurk
  committed
  3fa4afe
- Rename extensionnegotiation to negotiation
  JoTurk
  committed
  86435aa
- Move errors and helpers into errors.go
  JoTurk
  committed
  80bdc5d
- Validate ClientHello retries
  JoTurk
  committed
  c6f948c
- Test HRR ClientHello loss and reordering
  JoTurk
  committed
  502eaa4
Commits on Aug 21, 2026
- Implement 1.3 CID routing and rebinding
  JoTurk
  committed
  f86d23f
- Register RCC extension
  JoTurk
  committed
  f68da66
- Negotiate RRC
  JoTurk
  committed
  80416f4
- Add RRC record encoding
  JoTurk
  committed
  c883628
- RRC path validation state
  JoTurk
  committed
  355c1ff
- Integrate and test RRC
  JoTurk
  committed
  80c42b1
Commits on Aug 22, 2026
- Add RRC to the README
  JoTurk
  committed
  66a2879
Commits on Aug 23, 2026
- Use unique record numbers for fragments
  JoTurk
  committed
  4c9bac5
- Add path migration policies
  JoTurk
  committed
  9133ae5
- Return zero bytes from write on failure
  JoTurk
  committed
  aff5a0d
Commits on Aug 24, 2026
- Move to a unified UnpackDatagram API
  JoTurk
  committed
  2ddc5d4
- Drop the 13 suffix from CiphertextRecord13
  JoTurk
  committed
  f1b423a
- Update CID state comment to reflect new API
  JoTurk
  committed
  b65cec8
- Clarify readBufferLease ownership comment
  JoTurk
  committed
  d573b08
- Remove duplicated record-layer tests
  JoTurk
  committed
  24d7f48
- Remove duplicated pkg tests
  JoTurk
  committed
  c0d05ce
- Remove duplicated flight4 CID test
  JoTurk
  committed
  ee6e744
- Remove duplicated flight tests
  JoTurk
  committed
  5500940
- Cover all supported groups in test
  JoTurk
  committed
  7ab189f
- Make receive buffer size configurable
  
  the-sarge
  authored and
  Sean-Der
  committed
  bc06a67
- Update docker.io/library/golang Docker tag to v1.27
  
  renovate[bot]
  authored and
  Sean-Der
  committed
  857bac5
- Add accessor for negotiated DTLS role + version
  
  fippo
  authored and
  Sean-Der
  committed
  f5cb9af
- Fix unpack error missmatch
  JoTurk
  committed
  716d333
- Consolidate cipher fuzz and benchmark
  JoTurk
  committed
  415cdd1
- Remove redundant handshake tests
  JoTurk
  committed
  48ac143
- Remove redundant Algorithms13
  JoTurk
  committed
  150ae6c
Commits on Aug 25, 2026
- Fix RSA e2e timeout
  JoTurk
  committed
  ccb84ac
- Consolidate 1.2 and 1.3 SelectSignatureScheme
  JoTurk
  committed
  8a05270
- Remove redundant option tests
  JoTurk
  committed
  e8e8798
- Consolidate duplicated tests
  JoTurk
  committed
  c46aa65
- Replace Packet with outbound record intent
  JoTurk
  committed
  fefb0a1
- Update recordlayer package documentation
  JoTurk
  committed
  b8d0856
- Simplify datagram handling
  JoTurk
  committed
  dccb7be
Commits on Aug 28, 2026
- Add optimizations for connection & handshake (#820)
  
  noboruma
  and
  JoTurk
  authored
  0cbc18d
- Represent protocol versions as uint16
  JoTurk
  committed
  1736faa
Commits on Aug 29, 2026
- Fix packet connection leak
  
  noboruma
  authored and
  JoTurk
  committed
  f410566
- Close rejected listeners at Accept
  JoTurk
  committed
  bff4a0f
- Drop the transient WithOptions suffix
  JoTurk
  committed
  d1b4219
- Simplify cipher suite and record protection
  JoTurk
  committed
  923d6e6
- Rework client and listener constructors
  JoTurk
  committed
  f09375f
- Consolidate E2E scenarios
  JoTurk
  committed
  ca9cd61
- Consolidate options / config tests
  JoTurk
  committed
  3eaa315
- Deduplicate handshake test helpers
  JoTurk
  committed
  8891883
- Set LLL line-length to 320
  JoTurk
  committed
  16fcc84
Commits on Aug 31, 2026
- Check for non-approved algos on resume (#1079)
  jjinno
  authored
  73d391c
Commits on Sep 1, 2026
- Optimize buffer used by PacketConn (#1075)
  
  noboruma
  and
  JoTurk
  authored
  fb3caee
- Stabilize test HRR retransmission
  JoTurk
  committed
  2a3670e
Commits on Sep 4, 2026
- Implement DetachedConn
  JoTurk
  committed
  e72115d
- Add mDNS example for DetachedConn
  JoTurk
  committed
  59f4c33
Commits on Sep 7, 2026
- Optimize PacketConn (#1076)
  
  noboruma
  and
  JoTurk
  authored
  474c3e2
Commits on Sep 12, 2026
- Discard oversized and empty datagrams
  JoTurk
  committed
  3d2f13a
Commits on Sep 13, 2026
- Remove stream-to-packet transport adapters
  JoTurk
  committed
  1a14b35
- Bound MTU and receive-buffer to 65535
  JoTurk
  committed
  d679411
- Continue receiving after truncated datagrams
  JoTurk
  committed
  859cc4f
- Fix UDP truncation handling on Windows
  JoTurk
  committed
  f998c2c
- Enforce CID generator length
  JoTurk
  committed
  f22b49b
Commits on Sep 14, 2026
- Validate CID lengths during handshakes
  JoTurk
  committed
  84cf9e8
- Bound DTLS 1.3 read-key selection
  JoTurk
  committed
  f883ed6
- Update 1.3 seq tracking after auth
  JoTurk
  committed
  02c1445
- Update module github.com/pion/transport/v4 to v4.1.1
  
  renovate[bot]
  authored and
  JoTurk
  committed
  6622d4d
- Preserve full-width 1.3 record numbers
  JoTurk
  committed
  733a380
Commits on Sep 16, 2026
- Update to transport/v5 and Deadline.Context
  JoTurk
  committed
  e731329
- Fix racy ACK test
  JoTurk
  committed
  9b628e0
Commits on Sep 17, 2026
- Enforce RFC 9146 & 9147 CID routing rules
  JoTurk
  committed
  e6a3cae
- Fix flaky HRR retransmission test
  JoTurk
  committed
  8ca1f05
- Update MDNs example mod
  JoTurk
  committed
  b11e303
- Update module github.com/pion/transport/v5 to v5.0.1
  
  renovate[bot]
  authored and
  JoTurk
  committed
  1682c5a
- Optimize allocations for handshake and compaction (#1096)
  noboruma
  authored
  2497cb7
- Enforce CID requirements on queued datagrams
  JoTurk
  committed
  a40d470
- Fix race in CID rebinding tests
  JoTurk
  committed
  c3260f2
- Replace mutable record-layer with parse/marshal
  JoTurk
  committed
  1422912
Commits on Sep 18, 2026
- Discard late plaintext control records
  JoTurk
  committed
  4c8593e
- Use shared interop workflow
  JoTurk
  committed
  5f3ca8f
Commits on Sep 20, 2026
- Update to /v4
  JoTurk
  committed
  ea098b6
- Remove doc file
  JoTurk
  committed
  7f6751c
- Remove unused and duplicated code
  JoTurk
  committed
  a4c49b8
- Track record key usage stats
  JoTurk
  committed
  cf7ced4
- Support multiple CID aliases per conn
  JoTurk
  committed
  f68eaf4
- Support multiple CIDs in 1.3 state
  JoTurk
  committed
  c69d110
- Schedule 1.3 post-handshake messages by type
  JoTurk
  committed
  0f93eae
Commits on Sep 21, 2026
- Add post-handshake NewConnectionID handling
  JoTurk
  committed
  c2c2da0
- Add DTLS 1.3 keying-material exporter (#1133)
  
  enobufs
  and
  JoTurk
  authored
  7e96c55
- Update WithMaxVersion's comment
  NotAFlightRisk
  authored
  cfb985d
Commits on Sep 22, 2026
- Update module github.com/pion/transport/v5 to v5.1.0 (#1135)
  renovate[bot]
  authored
  05e47ce
- Implement 1.3 CID requests
  JoTurk
  committed
  bf4686a
- Support multiple paths internally
  JoTurk
  committed
  9310256
- Add local path migration API
  JoTurk
  committed
  185ef2d
- Avoid comparing entire x509 structs
  JoTurk
  committed
  05e93d5
Commits on Sep 23, 2026
- Update CI configs to v0.12.7
  
  pionbot
  authored and
  JoTurk
  committed
  49c2162
Commits on Sep 24, 2026
- Update module github.com/pion/transport/v5 to v5.1.1
  renovate[bot]
  committed
  17146cd
Commits on Sep 26, 2026
- Honor requested certificate types
  JoTurk
  committed
  6710047
- Allow PSK handshake if client certs are required
  JoTurk
  committed
  8d759cc
- Update module github.com/pion/dtls/v3 to v3.1.10
  renovate[bot]
  committed
  397d245
Commits on Sep 28, 2026
- Migrate some tests to synctest (#1148)
  lanc07
  authored
  9bf7af7
Commits on Sep 29, 2026
- Support dual-stack handshake retransmission
  JoTurk
  committed
  ea568b5
Commits on Oct 1, 2026
- Update module github.com/pion/mdns/v2 to v2.2.2 (#1154)
  renovate[bot]
  authored
  e907d97
- Disable SessionTicket
  JoTurk
  committed
  141c5f3
- Add PSK support to 1.3 key derivation
  JoTurk
  committed
  9977873
- Accept reordered extensions in ClientHello2 (#1156)
  
  devArnoud
  and
  JoTurk
  authored
  2b9989a
- Implement 1.3 PSK binder and ClientHello helpers
  JoTurk
  committed
  cd755b7
Commits on Oct 2, 2026
- Add 1.3 PSK state
  JoTurk
  committed
  762a4ad
- Document public PSK APIs after 1.3
  JoTurk
  committed
  7741cd0
- Implement 1.3 PSK handshake helpers
  JoTurk
  committed
  4dd4ec3
- Wire 1.3 PSK into flight and FSM
  JoTurk
  committed
  d045231
- Rework WithPSK for 1.3, identities and hashes
  JoTurk
  committed
  48ff9c6
- Consolidate public configs into options.go
  JoTurk
  committed
  202f779
- Add missing CID and 1.3 features to README
  JoTurk
  committed
  386d443
- Add multiple 1.3 PSK identity support
  JoTurk
  committed
  e705c45
- Add SHA-384 support for 1.3 PSK
  JoTurk
  committed
  b386d79
- Add 1.3 psk_ke support as fallback
  JoTurk
  committed
  9f2a63c
- Document PSK 1.3 supprt in README
  JoTurk
  committed
  534c8b4
- Remove public network and E2E tests
  JoTurk
  committed
  1e441ca
- Fix empty 1.2 ECDHE-PSK identity hint
  JoTurk
  committed
  e5a0f38
- Update module golang.org/x/net to v0.55.0 [SECURITY] (#881)
  renovate[bot]
  authored
  8dfdae6
Commits on Oct 3, 2026
- Scope empty identity hint to ECDHE-PSK
  JoTurk
  committed
  2b49400
- Move mDNS example to v4
  JoTurk
  committed
  9016586
- Extract flight4Generate
  JoTurk
  committed
  e6a8a21
- Derive 1.3 resumption secrets
  JoTurk
  committed
  2b1ffb9
- Finish 1.3 NewSessionTicket lifecycle
  JoTurk
  committed
  9025dd6
- Cache peer certificates with session tickets
  JoTurk
  committed
  fb0db03
- Load and validate cached 1.3 sessionTickets
  JoTurk
  committed
  d20a76a
- Select 1.3 server resumption tickets
  JoTurk
  committed
  b8ce6f7
- Wire 1.3 resumption into handshake
  JoTurk
  committed
  18c50cc
- Add DetachedConn 0rtt early-data API
  JoTurk
  committed
  ba9360e
Commits on Oct 4, 2026
- Set and advertise early-data limit
  JoTurk
  committed
  2426c6d
- Derive DTLS 1.3 early traffic keys
  JoTurk
  committed
  a722df0
- Support epoch 1 application records
  JoTurk
  committed
  8c6164e
- Add optional session-store for early-data
  JoTurk
  committed
  13cd371
- Negotiate ALPN in DTLS 1.3
  JoTurk
  committed
  8abf39f
- Negotiate early-data
  JoTurk
  committed
  bd3289d
- Wire and test early data into detachedConn
  JoTurk
  committed
  5ec130c
- DTLS 1.3 resumption example with optional 0-RTT
  JoTurk
  committed
  e32d7c0
- Document resumption and 0RTT support
  JoTurk
  committed
  bab22bd
- Remove the tag-freeze warning
  JoTurk
  committed
  1c813fa
- Keep isClient state during state resumption
  JoTurk
  committed
  03598cc
- Consolidate CID state copying and ciphers
  JoTurk
  committed
  a4a0aba
- Add helpers for 1.3 state export/restoration
  JoTurk
  committed
  fb2e4f7
Commits on Oct 5, 2026
- Support DTLS 1.3 state resume / export
  JoTurk
  committed
  c1890c2
- Extend TestResume to test DTLS 1.3
  JoTurk
  committed
  39010ef
- Document state export/resumption support for DTLS 1.3
  JoTurk
  committed
  79e1722
- Add ECH extension formats and alert
  JoTurk
  committed
  dd739cd
- Update CI configs to v0.12.8
  
  pionbot
  authored and
  github-actions[bot]
  committed
  8c26fc9
- Remove gocyclo, maintidx and gocognit
  JoTurk
  committed
  8779a0d
- Move dev CID errors to their final home in connection_id
  JoTurk
  committed
  e2177ba
Commits on Oct 6, 2026
- Extract CH wire parsing and validation
  JoTurk
  committed
  e468030
- Fix CCM length encoding of long additional data
  
  cB-Abhinav-Gautam
  authored and
  JoTurk
  committed
  33601b4
- ECH configuration and cryptographic helpers
  JoTurk
  committed
  bc08aaa
- Apply read and write deadlines to handshake
  JoTurk
  committed
  d181dcb
Commits on Oct 7, 2026
- Add initial ECH ClientHello construction
  JoTurk
  committed
  07d1a19
- Reject IPv4 literals in ECH public names
  JoTurk
  committed
  c32bfb8
Commits on Oct 8, 2026
- Add server ECH decryption and confirmation
  JoTurk
  committed
  2f72ede
Commits on Oct 9, 2026
- Add server ECH handshake integration
  JoTurk
  committed
  a45c9b0
- Integrate ECH with HRR
  JoTurk
  committed
  76bfecc
- Handle ECH client acceptance
  JoTurk
  committed
  f2d606b
Commits on Oct 10, 2026
- Add client ECH acceptance for HRR
  JoTurk
  committed
  00e10f6
- Handle ECH rejection, retry, fallback
  JoTurk
  committed
  f64c71b
- Add ECH support for external PSKs
  JoTurk
  committed
  c74a1f5
- Allow early-data through ECH
  JoTurk
  committed
  cf4b0e0
Commits on Oct 11, 2026
- Add ECH public options
  JoTurk
  committed
  39f10b4
- Document ECH support
  JoTurk
  committed
  ee71667
Commits on Oct 13, 2026
- Retransmit server flight on repeated CH
  JoTurk
  committed
  56f7863
Commits on Oct 14, 2026
- Support DTLS 1.3 key logging
  JoTurk
  committed
  a618ada
- Support 0rtt key logging with ECH
  JoTurk
  committed
  0a2ffd5
Commits on Oct 15, 2026
- Fix DTLS 1.3 alert for invalid Finished messages
  JoTurk
  committed
  aa9873c
- Delay ACKs as suggested in RFC 9147
  JoTurk
  committed
  99766f7
- Reject 1.3 CH with no shared group
  JoTurk
  committed
  c8b9a6b
- Return illegal_parameter for invalid compression
  JoTurk
  committed
  573e1ff
Commits on Oct 16, 2026
- Fix PSK identity-hint length overflow
  
  JoTurk
  and
  sollniss
  committed
  fd1f2db
- Reject empty certificate entries
  JoTurk
  committed
  c08e46d
- Bound SNI processing during certificate selection
  JoTurk
  committed
  fc93d75
- Validate handshake signatures against keys
  JoTurk
  committed
  87aff19
- Limit peer RSA keys before signature verification
  JoTurk
  committed
  0b615da
- Distinguish RSA-PSS certificate signature schemes
  JoTurk
  committed
  19003de
- Honor local signature policy for CertificateVerify
  JoTurk
  committed
  6157548
- Match server certificate keys to the cipher suite
  JoTurk
  committed
  c4afd84
- Preserve IP names for certificate verification
  JoTurk
  committed
  68ff298
- Count UDP connections before exposing them
  JoTurk
  committed
  9fe009b
- Reject unsupported DTLS 1.2 record epochs
  JoTurk
  committed
  33b9e4c
- Keep early application data from blocking Finished
  JoTurk
  committed
  3209f9e
- Process the client certificate flight once
  JoTurk
  committed
  a0f0f8a
- Verify client Finished in DTLS 1.2 handshakes
  JoTurk
  committed
  dae8186
- Reject unrequested client certificates
  JoTurk
  committed
  37de8de
- Save sessions only after client authentication
  JoTurk
  committed
  410ac0e
- Reject unoffered curves in DTLS client exchange
  JoTurk
  committed
  9368f21
- Negotiate DTLS parameters from the cookie CH
  JoTurk
  committed
  c1594b6
- Restrict cookie challenges to ClientHello retries
  JoTurk
  committed
  cc655df
- Validate DTLS 1.2 ALPN selection
  JoTurk
  committed
  35aad86
- Select cipher suites using the SNI certificate
  JoTurk
  committed
  c8b0a45
- Bind cached sessions to role and cipher suite
  JoTurk
  committed
  b835983
- Preserve extended master secret on resumption
  JoTurk
  committed
  674911d
- Recheck PSK credentials before resuming sessions
  JoTurk
  committed
  b674a57
- Authenticate peers again on session resumption
  JoTurk
  committed
  70954c9
- Validate cookies before resuming server sessions
  JoTurk
  committed
  19c8d70
- Bound DTLS 1.2 handshake cache memory usage
  JoTurk
  committed
  8deed2f
- Reject resumption of incomplete connection state
  JoTurk
  committed
  436c15e
- Retain the receive replay cutoff across Resume
  JoTurk
  committed
  9c02a60
- Authenticate detached application data delivery
  JoTurk
  committed
  ab311fd
- Keep detached read errors from blocking the driver
  JoTurk
  committed
  9bdb8a4
- Coalesce required KeyUpdate responses
  JoTurk
  committed
  79dc6cb
- Update module github.com/pion/dtls/v4 to v4.0.0-rc.5
  
  renovate[bot]
  authored and
  JoTurk
  committed
  5482e8e
Commits on Oct 17, 2026
- Prevent handshake message sequence wraparound
  JoTurk
  committed
  b645af6
- Port ECDHE_PSK ClientKeyExchange validation
  
  JoTurk
  and
  GerardGao
  committed
  ac0e387
- Validate DTLS 1.3 handshake record epochs
  JoTurk
  committed
  8d12840
Commits on Oct 18, 2026
- Update module github.com/pion/dtls/v4 to v4.0.0-rc.6
  
  renovate[bot]
  authored and
  JoTurk
  committed
  031ba96
- Handle messages while awaiting the final ACK
  JoTurk
  committed
  2892142
- Reset protection when restarting client handshakes
  JoTurk
  committed
  7d9c940
Commits on Oct 19, 2026
- Add TLS_ECDHE_PSK_WITH_CHACHA20_POLY1305_SHA256
  
  zmerlynn
  authored and
  JoTurk
  committed
  09df7f2
- Add ExportState for state restoration
  JoTurk
  committed
  ba1081a
Commits on Oct 20, 2026
- Pace repeated cookie responses with backoff
  JoTurk
  committed
  af014e3

Commits

Commits on Aug 8, 2026

Commits on Aug 9, 2026

Commits on Aug 10, 2026

Commits on Aug 11, 2026

Commits on Aug 12, 2026

Commits on Aug 13, 2026

Commits on Aug 14, 2026

Commits on Aug 15, 2026

Commits on Aug 16, 2026

Commits on Aug 17, 2026

Commits on Aug 18, 2026

Commits on Aug 19, 2026

Commits on Aug 20, 2026

Commits on Aug 21, 2026

Commits on Aug 22, 2026

Commits on Aug 23, 2026

Commits on Aug 24, 2026

Commits on Aug 25, 2026

Commits on Aug 28, 2026

Commits on Aug 29, 2026

Commits on Aug 31, 2026

Commits on Sep 1, 2026

Commits on Sep 4, 2026

Commits on Sep 7, 2026

Commits on Sep 12, 2026

Commits on Sep 13, 2026

Commits on Sep 14, 2026

Commits on Sep 16, 2026

Commits on Sep 17, 2026

Commits on Sep 18, 2026

Commits on Sep 20, 2026