s2n Files

• implement RFC compliant alert and content type handling. Fragmented alerts and unknown content types are now rejected.
• s2n-tls bindings default to a larger 16kB record size, matching OpenSSL and Rustls.
• fix: null evp_cipher_ctx after free in s2n_session_key_alloc() error path by @CarolYeh910 in https://github.com/aws/s2n-tls/pull/6024
• fix(docs): Hide unstable-renegotiate poll_send cfg in rustdoc by @Mark-Simulacrum in https://github.com/aws/s2n-tls/pull/6022
• test: peer_cert_chain behavior with elided CA by @jmayclin in https://github.com/aws/s2n-tls/pull/5914
• fix(psk): return usage error for uninitialized offered PSK by @mmustafasenoglu in https://github.com/aws/s2n-tls/pull/6009
• fix: prevent use-after-free in Connection::set_config when C setter rejects replacement by @CarolYeh910 in https://github.com/aws/s2n-tls/pull/6023
• chore: remove inline policy builder code by @CarolYeh910 in https://github.com/aws/s2n-tls/pull/6025
• chore(bindings): release bump by @jmayclin in https://github.com/aws/s2n-tls/pull/6027
• fix: zero-init hash state and guard async offload wipe against in-flight ops by @CarolYeh910 in https://github.com/aws/s2n-tls/pull/6028
• fix: handshake integrity over content types by @jmayclin in https://github.com/aws/s2n-tls/pull/6017
• test: add behavior tests for Connection::wipe by @jmayclin in https://github.com/aws/s2n-tls/pull/6029
• fix(bindings): default to efficient record size by @jmayclin in https://github.com/aws/s2n-tls/pull/6020
• chore: update http test with new status code by @jmayclin in https://github.com/aws/s2n-tls/pull/6034
• ci: install musl from Linux apt and upgrade octokit action to Node 24 by @CarolYeh910 in https://github.com/aws/s2n-tls/pull/6031
• fix: fail explicitly when server selects unavailable KEM group in key share recv by @CarolYeh910 in https://github.com/aws/s2n-tls/pull/6026
• feat(metrics): flush on drop by @jmayclin in https://github.com/aws/s2n-tls/pull/6032
• fix: Add fail-closed default cases to all switch statements by @alexw91 in https://github.com/aws/s2n-tls/pull/6006
• fix: Zero-initialize all local variable declarations by @alexw91 in https://github.com/aws/s2n-tls/pull/6007
• feat: add s2n_connection_handshake_complete() public API by @FreezB11 in https://github.com/aws/s2n-tls/pull/5906
• fix(connection): Make set_config validator replacement transactional by @alexw91 in https://github.com/aws/s2n-tls/pull/5847
• build(deps): bump cross-platform-actions/action from 1.3.0 to 1.4.0 in /.github/workflows in the all-gha-updates group by @dependabot[bot] in https://github.com/aws/s2n-tls/pull/6035
• test: print assertion backtraces in FAIL_MSG_PRINT by @firedog1234 in https://github.com/aws/s2n-tls/pull/5785
• fix(cbc): Disable padding after key init and check decrypt len by @alexw91 in https://github.com/aws/s2n-tls/pull/6042
• fix(metrics): jitter export timing by @jmayclin in https://github.com/aws/s2n-tls/pull/6046

• chore: bump metrics subscriber for release by @jmayclin in https://github.com/aws/s2n-tls/pull/6050

• @mmustafasenoglu made their first contribution in https://github.com/aws/s2n-tls/pull/6009

• @FreezB11 made their first contribution in https://github.com/aws/s2n-tls/pull/5906

Full Changelog: https://github.com/aws/s2n-tls/compare/v1.7.7...v1.7.8