s2n-tls

Release summary

Kyber removal means we're bumping the the MINOR version to v1.7.0.

What's Changed

• (chore): Rust bindings bump 0.3.33 by @jouho in https://github.com/aws/s2n-tls/pull/5694
• build(deps): update reqwest requirement from 0.12.7 to 0.13.1 in /tests/pcap in the all-cargo-updates group across 1 directory by @dependabot[bot] in https://github.com/aws/s2n-tls/pull/5690
• c...

Weekly release for Jan 5, 2026

Release Summary:

• Enables certificate intent validation by default. This also adds a config API s2n_config_disable_x509_intent_verification() to disable it if necessary
• Fixed an issue where selected_key_exchange_group for a resumed TLS 1.2 connection would incorrectly report secp256r1.

What's Changed

• build(deps): bump ytanikin/pr-convention...

Release Summary

Weekly release for Dec 15, 2025

Release Summary:

• The TLS handshake now succeeds when the async cert callback is configured and peers sent multiple TLS handshake messages per record.

What's Changed

• tests(integration): cases for TLS 1.3 group selection by @jmayclin in https://github.com/aws/s2n-tls/pull/5652
• fix: refactor negotiate loop to fix issue with async...

Release Summary

• Add a new public API, s2n_client_hello_get_random(), and move client_random storage from the connection to the s2n_client_hello struct so applications can retrieve the client random from a parsed ClientHello.
• Allow multiple application contexts to be set on a s2n-tls connection.
• Warning level TLS alerts may now be non-fatal prior to version negotiation
• Added support...

Weekly release for Nov 17, 2025

Release Summary:

• Adds pure ML-KEM-1024 support: s2n_pure_mlkem_1024 KEM group is now negotiable.

What's Changed

• test: add memory profiler test by @jmayclin in https://github.com/aws/s2n-tls/pull/5329
• docs: comments for blob, stuffer methods by @jmayclin in https://github.com/aws/s2n-tls/pull/5326
• refactor: remove unused s2n_socket_set_re...