[openssl/openssl] 7f68e8: DTLS 1.3 SSL Listener CAP pending connections

  Branch: refs/heads/feature/dtls-1.3
  Home:   https://github.com/openssl/openssl
  Commit: 7f68e8c4e8faca940b7f47bd000b2c4557271964
      https://github.com/openssl/openssl/commit/7f68e8c4e8faca940b7f47bd000b2c4557271964
  Author: Ryan Hooper <[email protected]>
  Date:   2026-08-11 (Tue, 11 Aug 2026)

  Changed paths:
    M doc/man3/SSL_CTX_set_new_pending_conn_cb.pod
    M doc/man3/SSL_get_value_uint.pod
    M doc/man3/SSL_new_listener.pod
    M include/internal/dgram_conn_lookup.h
    M include/openssl/ssl.h.in
    M ssl/d1_lib.c
    M ssl/dgram_demux.c
    M ssl/dtls_conn_lookup.c
    M ssl/ssl_lib.c
    M ssl/ssl_local.h
    M test/dtlsssllistenertest.c
    M util/libssl.num
    M util/other.syms

  Log Message:
  -----------
  DTLS 1.3 SSL Listener CAP pending connections

To prevent resource exhaustion we have to cap the number
of pending connections. The default is 256 pending connections
but there are APIs to configure the max number of pending
connections.

Fixes: openssl/project#1983
Fixes: openssl/project#2035
Assisted-by: Claude:claude-opus-4-7

Reviewed-by: Matt Caswell <[email protected]>
Reviewed-by: Jakub Zelenka <[email protected]>
MergeDate: Tue Aug 11 14:50:11 2026
(Merged from https://github.com/openssl/openssl/pull/31980)



To unsubscribe from these emails, change your notification settings at https://github.com/openssl/openssl/settings/notifications

-- 
You received this message because you are subscribed to the Google Groups "openssl-commits" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-commits/openssl/openssl/push/refs/heads/feature/dtls-1.3/1ee4a7-7f68e8%40github.com.