[openssl/openssl] 6bf938: DTLS 1.3 Limit DTLSv1_listen to DTLS1.2 and add SS...

  Branch: refs/heads/feature/dtls-1.3
  Home:   https://github.com/openssl/openssl
  Commit: 6bf938f239298ead19ee3fee173e8550e192b4ff
      https://github.com/openssl/openssl/commit/6bf938f239298ead19ee3fee173e8550e192b4ff
  Author: Ryan Hooper <[email protected]>
  Date:   2026-07-06 (Mon, 06 Jul 2026)

  Changed paths:
    M crypto/bio/bf_buff.c
    M crypto/bio/bio_sock.c
    M crypto/thread/build.info
    M doc/man3/BIO_socket_wait.pod
    M doc/man3/DTLSv1_listen.pod
    M doc/man3/SSL_new_listener.pod
    M doc/man3/SSL_set_bio.pod
    A include/internal/dgram_conn_lookup.h
    A include/internal/dgram_demux.h
    A include/internal/dtls_record_rx.h
    M include/internal/quic_channel.h
    M include/internal/quic_demux.h
    M include/internal/quic_predef.h
    M include/internal/recordmethod.h
    M include/internal/ssl_unwrap.h
    M include/openssl/bio.h.in
    M include/openssl/ssl.h.in
    M ssl/build.info
    M ssl/d1_lib.c
    A ssl/dgram_demux.c
    A ssl/dtls_conn_lookup.c
    A ssl/dtls_record_rx.c
    M ssl/quic/quic_demux.c
    M ssl/quic/quic_tls.c
    M ssl/record/methods/dtls_meth.c
    M ssl/record/methods/ktls_meth.c
    M ssl/record/methods/recmethod_local.h
    M ssl/record/methods/tls_common.c
    M ssl/record/rec_layer_d1.c
    M ssl/record/rec_layer_s3.c
    M ssl/record/record.h
    M ssl/rio/build.info
    M ssl/rio/poll_immediate.c
    M ssl/ssl_lib.c
    M ssl/ssl_local.h
    M ssl/statem/extensions_srvr.c
    M ssl/statem/statem_srvr.c
    M test/build.info
    A test/dtls_multithread_test.c
    A test/dtlsssllistenertest.c
    M test/dtlsv1listentest.c
    A test/recipes/80-test_dtls_multithread.t
    A test/recipes/80-test_dtlsssllistener.t
    M test/tls13encryptiontest.c
    M util/libcrypto.num
    M util/libssl.num
    M util/other.syms

  Log Message:
  -----------
  DTLS 1.3 Limit DTLSv1_listen to DTLS1.2 and add SSL Listener for DTLS

DTLSv1_listen will not support DTLSv1.3. Instead its max version is
DTLSv1.2

Adding DTLS SSL Listener that utilizes a similar DEMUX approach as
QUIC and passes traffic through the URXE structure.

This will establish full connection and an application can ask for
a ready SSL connection. The DTLS SSL listener also supports HVR
and HRR cookie validation.

Fixes: openssl/project#1946

Reviewed-by: Tomas Mraz <[email protected]>
Reviewed-by: Matt Caswell <[email protected]>
MergeDate: Mon Jul  6 09:29:09 2026
(Merged from https://github.com/openssl/openssl/pull/31137)



To unsubscribe from these emails, change your notification settings at https://github.com/openssl/openssl/settings/notifications

-- 
You received this message because you are subscribed to the Google Groups "openssl-commits" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-commits/openssl/openssl/push/refs/heads/feature/dtls-1.3/23be91-6bf938%40github.com.